quake-nearby

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs embedding a wallet private key in a shell command/environment variable (export FITTINGS_PRIVATE_KEY=0x...), which requires handling and potentially outputting a secret value verbatim and is high-risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs fetching and running remote code (curl -sO https://fittings.sh/skill/call.mjs), so the runtime can execute code from https://fittings.sh/skill/call.mjs which the skill treats as a required client dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly implements a metered payment flow using crypto: it returns a 402 with a signed quote, requires the client to sign an authorization, and documents using a wallet private key (FITTINGS_PRIVATE_KEY), USDC on Base, and related evm libraries. Those are concrete crypto/payment primitives (signing with a private key and authorizing on-chain/off-chain settlement), which permit an agent holding the key to execute payments. This is not a generic HTTP tool — it is a specific payment integration, so it grants Direct Financial Execution capability.