lang-detect

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL (https://fittings.sh/skill/call.mjs) is a direct-download of an executable script the docs instruct you to fetch and run (and to store a private key), which matches high-risk indicators for distributing malware or unsafe code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a language-detection API, but its documentation explicitly describes an on-chain payment flow that requires signing with a wallet private key (FITTINGS_PRIVATE_KEY), uses USDC on Base, and references EVM tooling (@x402/evm). It instructs how to set a private key and run the client to pay a quoted amount; that is explicit crypto signing/execution capability that can move funds. This meets the "Crypto/Blockchain (Wallets, ... Signing)" criterion for Direct Financial Execution.