tsunami-center-bulletins

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs point to a third‑party service that explicitly instructs users to download and execute a remote JS client (call.mjs) and to supply a private key — fetching and running unknown scripts that can sign payments is a high-risk practice.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit payment flow and client tooling that will sign authorizations and spend funds when a private key is provided. The docs describe the endpoint returning a "402 Payment Required" with a signed quote, instruct the user to set FITTINGS_PRIVATE_KEY and run call.mjs to pay (USDC on Base), and reference EVM-related libraries — this is a specific payment integration (not a generic HTTP call) that can cause the agent to authorize spending. These elements grant direct financial execution capability.