fittings-web

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow node scripts/call.mjs --search / --describe and paid calls (e.g., doc.url-to-markdown url=...) cause the client to fetch outsider-provided URLs/page content and ingest it as text at execution time.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and instructs using a spending wallet private key (export FITTINGS_PRIVATE_KEY=0x...) to pay per-request charges in USDC on Base, describes off-chain signature to authorize USDC transfers, and explains the facilitator will submit the transaction and cover gas. That is a specific crypto payment/transaction capability enabling the agent to execute financial transfers.