lunar-moon-times

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill's examples explicitly show exporting a private key on the command line (export FITTINGS_PRIVATE_KEY=0x...), and notes the key "sits in plaintext", which encourages embedding a secret verbatim in shell commands/agent runtime and thus creates an exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The skill instructs users to download and run https://fittings.sh/skill/call.mjs — a third‑party executable script served over a non-established vendor domain that can be modified server‑side and thus is a suspicious distribution vector for malware.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes an integrated crypto payment flow: the endpoint can return a "402 Payment Required" signed quote that the client signs, it shows an example using an environment private key (FITTINGS_PRIVATE_KEY) to authorize payment, mentions USDC on Base as the payer asset, and references EVM signing libraries (@x402/evm). These are concrete wallet/signing/payment operations (crypto/blockchain execution), not generic network calls, so the skill grants direct financial execution capability.