fda-drug-recall

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include an instruction to download-and-run a remote script (https://fittings.sh/skill/call.mjs), which is a high-risk pattern because executing code fetched from an external host without prior verification can deliver malware even if the API endpoints themselves are benign.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High-confidence: the skill documentation instructs fetching and then running remote code (call.mjs) via "curl -sO https://fittings.sh/skill/call.mjs", which downloads executable code the user would run locally.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit paid call flow that requires signing an authorization with a private key and holding USDC on Base. It instructs setting FITTINGS_PRIVATE_KEY, running call.mjs to pay, describes the payer signing off-chain and a facilitator settling/broadcasting, and mentions FITTINGS_MAX_PRICE and evm payment libraries. Those are direct financial-execution capabilities (signing/spending crypto funds).