fittings-icd10-lookup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The skill instructs users to download and execute an unsigned JavaScript module (https://fittings.sh/skill/call.mjs) and to supply private keys/wallets, which is a high-risk pattern (running arbitrary downloaded code and handling secrets).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path GET https://fittings.sh/v1/icd10/lookup ingests outsider-authored free text via the request query field (e.g., “type 2 diabetes”) and the skill searches/returns official ICD-10 descriptions based on that text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs users at runtime to download and execute remote code via "curl -sO https://fittings.sh/skill/call.mjs" and then run it with "node call.mjs", so the fetched URL (https://fittings.sh/skill/call.mjs) is a runtime external dependency that executes remote code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a metered payment flow that requires signing an authorization with an on-chain wallet: it documents exporting FITTINGS_PRIVATE_KEY, running the client to pay using USDC on Base, notes signing and settlement, and references EVM tooling (@x402/evm). These are specific crypto/payment primitives (wallet private key, signing, on-chain payment facilitation), so the skill grants direct financial execution capability.