fittings-sec-filing-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The URL https://fittings.sh/skill/call.mjs is a direct download of an executable JavaScript file with explicit instructions to run it (node call.mjs) from an unvetted domain, which poses a high risk of arbitrary code execution or credential theft.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow for sec.filing-search ingests only the user-provided query parameters (e.g., q) and then retrieves SEC EDGAR filing text from the efts.sec.gov-backed full-text search API; it is not described as reading any outsider-authored free text from a queue/feed without selecting a specific item via search.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a metered API that explicitly describes an on-chain/crypto payment flow: the endpoint returns a 402 with a signed quote, the client "sign[s] an authorization", and the example shows exporting a private key (FITTINGS_PRIVATE_KEY) and using a wallet holding USDC on Base. It references EVM tooling (@x402/evm) and states the facilitator broadcasts and pays gas. These are specific crypto wallet/signing payment mechanics (private key usage and transaction signing), which constitute direct financial execution authority.