fittings-rxnorm-normalize

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The link to https://fittings.sh/skill/call.mjs is a direct download of an executable JavaScript module that the doc instructs you to run (node call.mjs), which is a high-risk distribution pattern because arbitrary code from a third-party domain can execute on your machine.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow is a direct free-text normalization API call (GET https://fittings.sh/v1/rxnorm/normalize) that ingests the user-provided name string without any required selection of a specific trusted item first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime fetch of and execution instruction for remote code (curl -sO https://fittings.sh/skill/call.mjs followed by node call.mjs), meaning the URL https://fittings.sh/skill/call.mjs downloads code that is executed at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid API that requires signing an authorization with a crypto wallet (USDC on Base). It shows commands to set FITTINGS_PRIVATE_KEY, explains the client signs payments, references @x402/evm and off-chain signing/facilitator settlement, and advises using a throwaway wallet. These are specific crypto payment instructions (wallet/private-key signing) and thus constitute direct financial execution capability.