devicerecall-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In call.mjs, the runtime ingests only user-supplied argument values (e.g., query, firm, etc.) to construct the request to https://fittings.sh/v1/devicerecall/search (via the gateway) and then prints the service response text; it does not automatically read arbitrary outsider-authored free text from an inbox/feed/issue body without selecting a specific item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a payment flow that requires signing authorizations with a private key and using a crypto wallet (USDC on Base). It tells the client to set FITTINGS_PRIVATE_KEY, run node call.mjs to pay, references @x402/evm and off-chain signing, and explains the facilitator broadcasts and pays gas. These are specific crypto/payment integrations (wallet signing and settlement), which grant the ability to execute financial transactions.