fittings-pep-wikidata-screen

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One of the URLs (https://fittings.sh/skill/call.mjs) is a direct downloadable script that the doc explicitly instructs users to curl and execute, which is a common supply‑chain/malware vector and therefore suspicious unless the domain and script are fully trusted and audited.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Runtime workflow for pep.wikidata-screen ingests only the user-supplied request fields (e.g., name) and looks up trusted Wikidata position-held claims via the Wikibase API rather than reading outsider-authored free text from an external feed/queue without selecting an item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes an on-chain payment flow: it requires a wallet holding USDC on Base, instructs setting FITTINGS_PRIVATE_KEY, and shows running a client (node call.mjs) that signs an authorization so a facilitator settles and broadcasts the payment. It even references EVM helper packages (@x402/evm) and signing behavior. These are specific crypto payment/signing instructions (direct financial execution), not generic HTTP or browsing details.