fittings-papers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow is a user-driven metadata lookup against Crossref/ORCID endpoints (e.g., crossref.search and crossref.doi-metadata) and consumes bibliographic free-text queries and DOI inputs that can originate from outsider-authored text without a prior trusted selection step.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and documents on-chain/off-chain crypto payments: it charges per request in USDC on Base, requires a spending wallet private key set in FITTINGS_PRIVATE_KEY, and describes an off-chain signature authorizing a USDC transfer (the facilitator submits the transaction). These are specific crypto payment execution details that grant the agent the ability to move funds.