treasury-exchange-rate

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The repository instructs fetching and running a .mjs script directly from fittings.sh (a small/personal domain serving an executable), which is a direct executable download from an unvetted host and is therefore high-risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In call.mjs, outsider-provided free text is only accepted via command-line --search/--describe and affects /catalog/search and /catalog/... responses, but the required runtime workflow for treasury.exchange-rate is a parameterized GET to /v1/treasury/exchange-rate using user-supplied country/currency/date fields rather than ingesting arbitrary free-text from an external authoring channel like email/chat/issue bodies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill requires on-chain style payments: it returns a 402 with a signed quote, requires signing an authorization, and explicitly instructs setting FITTINGS_PRIVATE_KEY (a wallet private key) and using a wallet holding USDC on Base. It references EVM tooling (@x402/evm) and describes signing/settlement behavior. Those are specific crypto payment/signing capabilities (Direct Financial Execution).