fittings-fmt-csv-to-json

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill, while primarily a CSV->JSON converter, includes an explicit paid access flow that requires cryptographic signing and use of a private key: it describes a 402 signed quote, signing an authorization with a PAYMENT-SIGNATURE header, environment variable FITTINGS_PRIVATE_KEY, guidance to use a wallet holding USDC on Base, and references @x402/evm. These are concrete crypto/payment integration details (wallet/private-key signing and on-chain facilitator settlement) that enable the agent to authorize spending — i.e., direct financial execution capability.