fittings-dailymed-spl-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The listing includes a direct download of a JavaScript module (https://fittings.sh/skill/call.mjs) that the document instructs you to curl and execute with node, which is a high-risk distribution pattern for malware; the other URLs are API/catalog endpoints and are less risky.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes an on-chain payment flow: the endpoint returns a signed quote and the client must "sign an authorization" with a wallet. It instructs using a wallet holding USDC on Base, exporting FITTINGS_PRIVATE_KEY (0x...), and running the client to "pay for real." It also references evm-related client libraries (@x402/evm) and caps like FITTINGS_MAX_PRICE. Those are concrete crypto/wallet payment instructions that enable spending funds when a private key is provided, so the skill grants direct financial execution capability.