fda-drug-label

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The skill instructs fetching and running a remote executable JavaScript module (call.mjs) from an untrusted domain and explicitly asks to set a plaintext private key for payments — a distribution pattern that can deliver malware or steal secrets.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a built-in payment flow using crypto wallets: the endpoint may return a signed quote requiring the client to "sign an authorization", examples show exporting FITTINGS_PRIVATE_KEY and running node call.mjs with "a wallet holding USDC on Base", and it references @x402/evm for EVM signing. These are specific crypto payment instructions (wallet private key, signing, USDC on Base), which grant the agent the capability to sign and authorize spending—i.e., direct financial execution.