A technical inventory of what the ledger allows this account to do. Not a safety judgment — none of these facts, alone or in combination, mean "safe" or "unsafe." The absence of a capability here is also not a reassurance.
Freeze capability
This issuer retains the ability to freeze trustlines but is not currently doing so.
Freeze is a standard AccountRoot capability. Both regulated stablecoins (e.g. RLUSD) and bad actors have used it — the capability alone is not a warning.
Source: XRPL AccountRoot.Flags (via AccountInfo)
Master key
The account's master private key has been disabled. Transactions must be signed by an alternative key (RegularKey or SignerList).
Common on production custody setups; also seen on some compromised accounts. Presence alone is not a signal.
Source: XRPL AccountRoot.Flags (via AccountInfo)
RegularKey
A RegularKey (rrrrrr…LvTp) is configured, providing an alternative signing key.
Standard ledger pattern for key rotation and hot/cold separation.