data-column-profile

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL is a direct download of a script (call.mjs) from a non-major site — downloading and executing such remote scripts is a high-risk distribution vector even if the service appears legitimate.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow only accepts the outsider-provided data/payload directly in the POST https://fittings.sh/v1/data/column-profile request body (and otherwise performs no free-text ingestion/search beyond passing that parameter through), and it does not read from any outsider-controlled feed/queue or fetch arbitrary outsider-authored content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill requires agents/clients to perform cryptographic payment authorizations: it describes a 402 payment flow where the client must "sign an authorization", include a PAYMENT-SIGNATURE header, and use a wallet/private key (mentions USDC on Base and that the key sits in plaintext). It also references EVM signing libraries (@x402/evm). These are explicit crypto/payment signing capabilities that enable an agent to authorize spending, so this skill exposes direct financial execution (off‑chain signature to pay).