rxterms-prescribable

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The list includes a direct download link to an executable JavaScript module (call.mjs) and the README instructs users to curl and run it — a high-risk pattern for distributing malware when fetched from an external service.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs fetching and then running remote code from https://fittings.sh/skill/call.mjs (curl -sO https://fittings.sh/skill/call.mjs), which is a required client script that users may download and execute, so it is a runtime-installation external dependency that can execute code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid API flow that requires signing an authorization with a private key and using a crypto wallet: it returns a 402 with a signed quote, the client must sign an authorization, examples show setting FITTINGS_PRIVATE_KEY and running node call.mjs, and it specifies a wallet holding USDC on Base and a facilitator that broadcasts/pays gas. It also references EVM/npm tooling (@x402/evm). These are specific crypto payment instructions (wallet keys, signing, USDC on Base), i.e. direct financial execution capability.