Token Core Android Audit report.

Warnings

• Permission surface may require sandboxing
• Repository appears stale
• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• Repository looks stale
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Recent maintenance: 3y since push
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.