fittings-csl-name-screen

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs setting FITTINGS_PRIVATE_KEY via an export command (showing a 0x... private key) and notes the key sits in plaintext, meaning an LLM or agent would be prompted to handle and potentially emit the secret verbatim in shell commands or code.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This skill doc instructs downloading and executing a remote JavaScript module (curl -sO https://fittings.sh/skill/call.mjs then run node call.mjs), which is a high-risk pattern for distributing malware even if other listed endpoints are benign API URLs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs fetching and executing remote JavaScript with "curl -sO https://fittings.sh/skill/call.mjs" followed by "node call.mjs", so the URL https://fittings.sh/skill/call.mjs supplies code that would be executed at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is not just informational: it requires and documents on-chain/crypto payment authorization. The doc describes a 402 "Payment Required" flow where the caller signs an authorization with a wallet private key (FITTINGS_PRIVATE_KEY), references USDC on Base, and points to @x402/evm tooling for signing. This is an explicit crypto payment/signing integration (wallet signing), which is a direct financial execution capability under the "Crypto/Blockchain (Wallets, Swaps, Signing)" rule.