nws-point-forecast

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow fetches only first-party service data from https://fittings.sh (catalog metadata and the selected endpoint like /v1/nws/point-forecast) using caller-supplied numeric parameters, and it does not ingest any outsider-authored free text without an explicit selection of the specific item/endpoint to call.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill implements a specific wallet-based payment flow: the paid endpoint returns a signed quote (402), the client must sign an authorization with a private key, and a facilitator settles the payment. The doc explicitly shows exporting FITTINGS_PRIVATE_KEY, running call.mjs to pay with a wallet holding USDC on Base, and warns that the key sits in plaintext. This is an explicit crypto wallet signing/payment mechanism (wallet, signing, on-chain settlement), not a generic HTTP caller, so it grants direct financial execution capability.