fittings-aba-routing-validate

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL (https://fittings.sh/skill/call.mjs) is a direct download of an executable script that the skill explicitly instructs the user to run (curl -sO ...; node call.mjs) from an unverified/unknown domain, which is a high-risk pattern for malware distribution.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is primarily a routing-number validator but explicitly requires and documents a crypto payment flow: it returns a signed quote, requires signing an authorization, and the example client uses a FITTINGS_PRIVATE_KEY (private key) and USDC on Base. It references EVM tooling (@x402/evm) and describes paying via a wallet. Those are specific crypto/payment integrations that enable signing authorizations and spending funds, which meets the definition of Direct Financial Execution.