fittings-tsunami-center-bulletins

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL is a direct link to a downloadable script (call.mjs) accompanied by explicit instructions to fetch and execute it, which is a high‑risk pattern for distributing malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and executing remote code at runtime (curl -sO https://fittings.sh/skill/call.mjs followed by node call.mjs), which downloads and runs an external script that could execute arbitrary code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit crypto payment flow: it describes a 402 payment flow with a signed quote, requires setting FITTINGS_PRIVATE_KEY, instructs using a wallet holding USDC on Base, and references EVM/client libraries (@x402/core, @x402/evm). That provides functionality to sign authorizations with a private key and facilitate on‑chain payments — i.e., direct financial execution capability.