rxclass-drug-classes

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The skill explicitly instructs users to download and run a remote JavaScript module (curl -sO https://fittings.sh/skill/call.mjs), which is effectively executing code from an external, non‑vetted host and is a common malware distribution vector.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow (call.mjs) builds a request from caller-provided query parameters (e.g., drug, classTypes) and sends them to https://fittings.sh/v1/rxclass/drug-classes, but it does not ingest any outsider-authored free-text source like email/chat/inbox/comments/issue bodies or arbitrary web pages without the caller explicitly selecting parameters.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is primarily a drug-class lookup, but it explicitly includes a payment flow that requires and instructs use of a crypto wallet/private key (off-chain signing) to authorize quotes: the endpoint returns 402 with a signed quote, the client signs an authorization, and the README shows exporting FITTINGS_PRIVATE_KEY and running the client with USDC on Base. It also references @x402/evm and signing behavior. Those are explicit crypto wallet/signing instructions (direct financial execution capability).