fema-disaster-declarations

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs include a direct link to an executable script (https://fittings.sh/skill/call.mjs) and the README explicitly instructs users to curl and run it from a non-official personal domain, which is a high-risk distribution vector for malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). call.mjs performs HTTP fetches only to first-party fitting-service endpoints (e.g., /catalog and the x402 quoted request URL) and treats returned content as payment terms/data rather than ingesting outsider-authored free text submitted into a monitored queue/feed.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid call flow that requires signing an authorization with an on-chain wallet: it returns a 402 with a signed quote, instructs setting FITTINGS_PRIVATE_KEY and using a wallet holding USDC on Base, and warns about spending and private-key handling. Those are concrete crypto payment instructions (wallet signing / spending), i.e., direct financial execution capability.