fdic-bank-lookup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). SKILL.md explicitly instructs fetching and then running remote code with "curl -sO https://fittings.sh/skill/call.mjs" (also referenced in call.mjs), meaning the skill can pull and execute code from that URL.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit on-chain/crypto payment flow: the endpoint returns a signed quote and the client must sign an authorization with a wallet private key (FITTINGS_PRIVATE_KEY) to pay in USDC on Base. It instructs exporting a private key and running the client to spend funds, and warns about keys and wallets. Those are direct crypto signing/spending instructions (wallet/private-key use), which constitute Direct Financial Execution capability.