fittings-cfr-section-text
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECREDENTIALS_UNSAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches a JavaScript execution script (
call.mjs) from the author's domain athttps://fittings.sh/skill/call.mjsand executes it usingnode. This is a core part of the skill's functionality for handling signed payment requests. - [CREDENTIALS_UNSAFE]: The documentation provides instructions to set a
FITTINGS_PRIVATE_KEYenvironment variable to authorize USDC payments on the Base network. While the skill explicitly recommends using a throwaway wallet for security, storing private keys in environment variables remains a sensitive operation. - [COMMAND_EXECUTION]: Employs shell commands including
curlandnodeto retrieve service information and run the local payment facilitator client. - [EXTERNAL_DOWNLOADS]: References external Node.js packages
@x402/coreand@x402/evmwhich are used for building custom clients to interact with the underlying payment protocol. - [PROMPT_INJECTION]:
- Ingestion points: The skill accepts parameters for
title,section, anddatein the command line execution instructions. - Boundary markers: No explicit boundary markers or instruction-ignoring delimiters are defined in the provided schema.
- Capability inventory: The skill has the capability to perform network requests and execute local shell commands via the downloaded
call.mjsscript. - Sanitization: The documentation does not specify sanitization or validation logic for the input fields prior to execution.
Audit Metadata