crypto-random-bytes

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The SKILL instructs downloading and running a remote script (call.mjs) from an unverified domain (https://fittings.sh), which is a direct executable download that could be used to distribute malware even if the other endpoints are merely APIs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs fetching and then running remote code from https://fittings.sh/skill/call.mjs (SKILL.md recommends curl -sO that URL), which would execute externally retrieved code and is therefore a runtime-executable dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a payment flow that requires a crypto wallet private key and signing an authorization to settle a quoted payment (mentions export FITTINGS_PRIVATE_KEY, signing an authorization, a wallet holding USDC on Base, and facilitator settlement). That is an explicit crypto/payment signing capability (wallet signing) rather than a generic HTTP or browser tool, so it grants Direct Financial Execution authority.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to download and run a remote script and to place a private key in plaintext on the host (via an exported environment variable), which encourages executing untrusted code and leaving secrets on the machine — a high-risk state change even though it doesn't request sudo or system-file edits.