bankr

The Bankr skill describes a legitimate high-privilege autonomous trading assistant with broad cross-chain capabilities. However, plaintext storage of API keys, OTP onboarding, and the ability to perform arbitrary transactions and raw calldata introduce substantial security and supply-chain risks. Mitigations should include encrypted secret storage with access controls, per-action scopes and approvals, explicit user confirmations for high-risk operations, robust auditing/logging, and hardened onboarding to prevent credential leakage or playback attacks.