water-usgs-streamflow

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include an explicit instruction to curl and run a JavaScript module (https://fittings.sh/skill/call.mjs) from an external domain — downloading and executing code from an untrusted host is a high-risk pattern for malware distribution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). call.mjs performs runtime fetches to https://fittings.sh (e.g. /catalog, /skill/call.mjs.sha256 and the suggested curl https://fittings.sh/skill/call.mjs) to obtain service descriptors, payment terms and even a bundled client script that directly determine the agent's requests and payment workflow, so the skill relies on external content at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit crypto payment flow: the endpoint can return a 402 quote which the client must sign, the docs show setting FITTINGS_PRIVATE_KEY and running node call.mjs to pay with a wallet holding USDC on Base, and it references evm signing libraries and caps on spending. These are specific blockchain payment instructions (wallet/private-key signing), constituting direct financial execution capability.