brand-logo

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs setting a private key directly via an export (export FITTINGS_PRIVATE_KEY=0x...) and states the key sits in plaintext, which encourages embedding secret material in shell commands/environment and risks the LLM needing to handle or output the secret verbatim.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit on-chain payment flow: the endpoint returns a 402 signed quote which the client must sign with a private key (FITTINGS_PRIVATE_KEY) to authorize settlement. The docs instruct using a wallet holding USDC on Base, reference @x402/evm, and state the client signs authorizations and a facilitator settles the transaction. This is a specific crypto payment integration that can move funds (sign and authorize payments), so it grants direct financial execution capability.