rxnorm-ndc-crosswalk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow for rxnorm.ndc-crosswalk in call.mjs ingests only user-provided key=value arguments (e.g., rxcui, ndc, limit) and then fetches first-party gateway/service data from https://fittings.sh using those parameters; it does not read outsider-authored free text from an externally submitted queue/feed (it only sends structured params to an endpoint and prints the service response).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a paid metered flow that requires the client/agent to sign an authorization with a private key and use a crypto wallet (USDC on Base). It references setting FITTINGS_PRIVATE_KEY, signing a quote (402 Payment Required), and npm evm tooling (@x402/evm), and warns about spending real funds. Those are concrete crypto payment/signing capabilities that enable the agent to authorize on-chain/crypto payments — i.e., direct financial execution authority.