pep-wikidata-screen

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The skill instructs downloading and running a JavaScript module directly from fittings.sh (curl -sO https://fittings.sh/skill/call.mjs), which is an unverified executable script download — a high-risk vector for malware if the source is not trusted.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads outsider-provided free text at runtime via call.mjs passing user-supplied --search query (GET /catalog/search?q=...) and --describe service-id (GET /catalog/<id>), which are arbitrary user strings consumed by the required runtime client.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill describes a paid API that requires cryptographic signing with a wallet/private key (export FITTINGS_PRIVATE_KEY=0x...), specifies a wallet holding USDC on Base, and describes signing an authorization and facilitator settlement. These are explicit crypto payment/transaction signing details (off-chain signing, @x402/evm, facilitator broadcast) and therefore grant direct financial execution capability.