fittings-census-geocode-batch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In https://fittings.sh/v1/census/geocode-batch, the required runtime workflow consumes the outsider-supplied addresses array (free-form strings) directly as request body input to produce census geographies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit payment flow that requires signing authorizations with a private key and using crypto (USDC on Base). It instructs using a FITTINGS_PRIVATE_KEY, retrying with a PAYMENT-SIGNATURE header, and references EVM signing libraries (@x402/evm). Those are specific blockchain/crypto payment mechanisms (wallet signing and on-chain facilitator settlement), which grant the agent the ability to execute or authorize payments.