calc-worksheet

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include a direct instruction to download and run a remote script (https://fittings.sh/skill/call.mjs), which is a high-risk pattern because running fetched code from an external domain can execute untrusted code and distribute malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and executing remote code from https://fittings.sh/skill/call.mjs (via curl -sO ... and subsequent node call.mjs usage), so this URL supplies executable code the skill relies on.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes an on-ramp to pay for calls using a crypto wallet: it returns a 402 quote that the client must sign (lines 62-66), shows an example requiring a wallet holding USDC on Base and exporting FITTINGS_PRIVATE_KEY (lines 72-75), and states the client will sign authorizations and settle via a facilitator (lines 76-83). That is a specific crypto/payment signing flow (wallet/private key use), which grants the agent the ability to sign and authorize real payments — i.e., direct financial execution authority.