fittings-chem-pubchem-compound
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a payment execution client from the vendor domain at https://fittings.sh/skill/call.mjs.
- [REMOTE_CODE_EXECUTION]: The downloaded script is executed locally using node to process data requests and settle micropayments.
- [COMMAND_EXECUTION]: The skill uses curl and node shell commands to interact with the API; these represent a potential injection surface if arguments are not properly handled.
- [CREDENTIALS_UNSAFE]: The documentation prompts the user to store a sensitive blockchain private key in the FITTINGS_PRIVATE_KEY environment variable.
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection via compound parameters. 1. Ingestion points: name, cid, and smiles parameters. 2. Boundary markers: None specified in command examples. 3. Capability inventory: Remote script download, node execution, and transaction signing. 4. Sanitization: The documentation does not describe sanitization within the client logic.
Audit Metadata