time-zone-clock

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). One URL (https://fittings.sh/skill/call.mjs) is a direct download of an executable script from a third‑party domain (recommended to be treated as untrusted), while the other links are API/catalog endpoints and lower risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime path call.mjs only ingests first-party service responses from https://fittings.sh (e.g., /catalog/... and the 402 Payment Required terms header/body) and does not read arbitrary outsider-authored free text without explicitly selecting specific services/items to call.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid API flow that requires cryptographic signing with a wallet private key to authorize settlement. It instructs setting FITTINGS_PRIVATE_KEY, running a client that will sign an authorization, and holds USDC on Base; it also references @x402/core and @x402/evm libraries. These are specific crypto/blockchain payment/signing capabilities that enable the agent to authorize spending (direct financial execution).