bls-series

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows and requires exporting a private key in plaintext (export FITTINGS_PRIVATE_KEY=0x...) to execute paid calls, which would force an agent to handle or emit the secret verbatim in commands.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The skill instructs users to curl and run a JS executable hosted at https://fittings.sh/skill/call.mjs (remote code to be downloaded and executed), which is risky when coming from a non‑well‑known/unverified site.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and running remote code from https://fittings.sh/skill/call.mjs (curl -sO ...) so external code can be downloaded and executed as part of setup/runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly supports on-chain-style payments: the endpoint returns a "402 Payment Required" with a signed quote that the client must sign, it instructs setting FITTINGS_PRIVATE_KEY (0x...) and using a wallet holding USDC on Base, and warns about spending and private-key handling. Those are explicit crypto wallet signing/payment capabilities (direct financial execution).