chem-pubchem-compound

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The listed URLs are API endpoints on fittings.sh and generally look legitimate for calling the described service, but the explicit direct download link to an executable script (https://fittings.sh/skill/call.mjs) is potentially risky because it instructs users to fetch-and-run code from a single, not widely-known domain.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and running remote code from https://fittings.sh/skill/call.mjs (curl -sO https://fittings.sh/skill/call.mjs), which would download executable script content used to run the client—i.e., remote code fetched at install/runtime that the skill then executes.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly supports paid calls that require signing an off-chain authorization with an EVM private key (FITTINGS_PRIVATE_KEY) and a wallet holding USDC on Base. The README shows commands to set a private key and run the client, describes signing an authorization and facilitator settlement, and references EVM-related npm packages — this is a specific crypto/payment signing flow (wallet signing/spending), which constitutes direct financial execution authority.