ghsa-advisory

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The URL https://fittings.sh/skill/call.mjs is a direct downloadable script that the skill instructs users to fetch and run (curl + node), which is a high-risk pattern for distributing malware; the other fittings.sh links are API/catalog endpoints and not direct executables.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow only ingests user-supplied id/query parameters and then fetches a GitHub Advisory record from https://fittings.sh/v1/ghsa/advisory (optionally including includeDescription), i.e., it does not read arbitrary outsider-authored free text from a monitored feed/inbox or allow unsolicited outsider submissions to be ingested without a specific call input.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid API flow that requires signing an on-chain payment authorization: it returns a 402 with a signed quote, the client signs an authorization, and a facilitator settles the payment. The docs show running the client with FITTINGS_PRIVATE_KEY (a wallet private key) and note spending USDC on Base and signing behavior. This is a specific crypto/payment integration (wallet signing/settlement), which grants direct financial execution capability.