tz-offset-at

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point to a small, non-official domain that explicitly instructs users to curl and run a distributed script (call.mjs), which is a risky pattern because fetching and executing code from an unvetted host can distribute malware.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a payment flow that requires a crypto wallet private key and signing an authorization (mentions FITTINGS_PRIVATE_KEY, USDC on Base, off‑chain signing, and @x402/evm). Those are specific crypto payment/signing capabilities (wallet signing to authorize payments), which constitute direct financial execution authority.