fittings-health

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads outsider-authored free text via user-provided queries/inputs that are used to search/fetch registry content (e.g., rxnorm.normalize, ctgov.trial-search, fda.drug-recall, pubmed.search/citation-search, etc., which ingest the user’s text into LLM-handled responses).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and instructs use of a crypto wallet for payments: it mandates "USDC on Base" and an environment variable FITTINGS_PRIVATE_KEY (a private key), describes an off-chain signature authorizing a USDC transfer, and tells the agent how payment transactions are submitted. Those are direct crypto payment/transaction execution capabilities.