fittings-cfr-section-text

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECREDENTIALS_UNSAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Fetches a JavaScript execution script (call.mjs) from the author's domain at https://fittings.sh/skill/call.mjs and executes it using node. This is a core part of the skill's functionality for handling signed payment requests.
  • [CREDENTIALS_UNSAFE]: The documentation provides instructions to set a FITTINGS_PRIVATE_KEY environment variable to authorize USDC payments on the Base network. While the skill explicitly recommends using a throwaway wallet for security, storing private keys in environment variables remains a sensitive operation.
  • [COMMAND_EXECUTION]: Employs shell commands including curl and node to retrieve service information and run the local payment facilitator client.
  • [EXTERNAL_DOWNLOADS]: References external Node.js packages @x402/core and @x402/evm which are used for building custom clients to interact with the underlying payment protocol.
  • [PROMPT_INJECTION]:
  • Ingestion points: The skill accepts parameters for title, section, and date in the command line execution instructions.
  • Boundary markers: No explicit boundary markers or instruction-ignoring delimiters are defined in the provided schema.
  • Capability inventory: The skill has the capability to perform network requests and execute local shell commands via the downloaded call.mjs script.
  • Sanitization: The documentation does not specify sanitization or validation logic for the input fields prior to execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 10:31 PM