text-profanity-filter

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The set includes a direct link to an executable script (https://fittings.sh/skill/call.mjs) and documentation that instructs users to curl and run that script, which is a high-risk pattern for distributing malware from a third‑party domain.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill describes a paid API flow that requires signing an authorization with a private key and spending USDC on Base (crypto wallet). It shows explicit commands to set FITTINGS_PRIVATE_KEY and call the client (export FITTINGS_PRIVATE_KEY=0x...; node call.mjs), mentions @x402/evm and off-chain signing/facilitator settlement. These are specific crypto payment instructions that enable an agent to authorize and spend funds.