fittings-text-sentiment

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The document instructs placing a private key in an environment variable (export FITTINGS_PRIVATE_KEY=0x...) and explicitly says "the key sits in plaintext wherever the agent runs," which would require the agent or user to handle and possibly emit the secret value verbatim in shell commands or config.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The document instructs users to curl and execute a remote JavaScript module (https://fittings.sh/skill/call.mjs) from an unverified domain — downloading and running remote scripts is a high-risk distribution vector for malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's example runtime instructions explicitly download and execute remote code (curl -sO https://fittings.sh/skill/call.mjs followed by node call.mjs), so the fetched URL controls execution on the agent host.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit crypto payment instructions: the endpoint returns a signed quote and the client must sign an authorization using a private key (FITTINGS_PRIVATE_KEY) to pay in USDC on Base. The docs show running node call.mjs with a wallet key, describe off-chain signing, and reference EVM wallet libraries (@x402/evm). Those are specific wallet/signing/payment capabilities (direct financial execution).