fittings-pubmed-citation-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The presence of a direct downloadable script (https://fittings.sh/skill/call.mjs) accompanied by explicit instructions to curl and run it makes this a suspicious distribution vector that could deliver malware or perform unwanted actions.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow for pubmed.citation-search ingests only a user-supplied term query string and then fetches PubMed results as structured citation metadata (title/journal/date/authors/DOI/PMID), not outsider-authored free text from an arbitrary submission feed/queue.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs users to fetch and run remote code at runtime via "curl -sO https://fittings.sh/skill/call.mjs" and then execute it with "node call.mjs", so it clearly downloads and executes external code (https://fittings.sh/skill/call.mjs).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation includes explicit payment flow and crypto signing instructions: the endpoint returns a 402 with a signed quote that the client must sign, it shows exporting FITTINGS_PRIVATE_KEY (0x...) and running a client to pay, references USDC on Base, and mentions EVM signing libraries (@x402/evm). These are specific crypto/payment actions (wallet private key, signing authorizations) that enable financial execution.