pubmed-search

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs setting a private key via an export command (export FITTINGS_PRIVATE_KEY=0x...), and states the key "sits in plaintext", which encourages placing and using a secret value verbatim in shell commands/outputs, creating a high exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This domain hosts a downloadable Node script and the skill README explicitly tells you to curl and run https://fittings.sh/skill/call.mjs (and to provide a private key), which lets code from that site execute locally and access secrets—so it should be treated as a potentially unsafe/untrusted executable source.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit payment flow that requires a crypto wallet private key (FITTINGS_PRIVATE_KEY), instructs using a wallet holding USDC on Base, and shows a client command that signs an authorization which the facilitator settles. This is a concrete blockchain/crypto signing/payment integration (not merely a generic HTTP or browser action), so it provides direct financial execution capability.