fmt-xml-to-json

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The URL https://fittings.sh/skill/call.mjs is a direct download of an executable JavaScript module from a non‑well‑known third‑party domain; downloading and running such a script from an untrusted source can execute arbitrary code and is therefore risky.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow (POSTing xml to https://fittings.sh/v1/fmt/xml-to-json) ingests only caller-supplied XML payload from the request body, which is outsider-authored free text processed by the service but not via any queue/feed/source that the agent monitors or auto-selects.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid API flow that requires signing an authorization (PAYMENT-SIGNATURE) and using a private key/wallet; it even instructs storing a FITTINGS_PRIVATE_KEY, using USDC on Base, and references client libraries (@x402/evm). These are concrete crypto payment/signing mechanisms (wallet signing and on-chain facilitator settlement), i.e. direct financial execution capability.