pubmed-citation-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). One URL (https://fittings.sh/skill/call.mjs) is a direct link to a JavaScript executable that the skill explicitly tells users to curl and run—downloading and executing scripts from an external/unvetted host is a common malware distribution vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md explicitly tells the user to fetch and then run remote code (curl -sO https://fittings.sh/skill/call.mjs then run node call.mjs), so the URL https://fittings.sh/skill/call.mjs provides executable code that may be run at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit payment flow that requires signing authorizations with a crypto private key: it describes 402 "Payment Required" quotes that you sign, shows exporting FITTINGS_PRIVATE_KEY (0x...) and running node call.mjs, and advises using a wallet holding USDC on Base. That is a specific crypto/wallet payment integration (signing transactions/authorizations), which enables direct financial execution.