fittings-cpi-adjust
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a helper script (
call.mjs) directly from the service provider's domain (fittings.sh). This is the vendor's own infrastructure and is used to facilitate the described payment and API interaction. - [COMMAND_EXECUTION]: The documentation includes shell commands using
curlandnodeto interact with the API. These are standard integration steps for the provided service. - [CREDENTIALS_SAFE]: While the skill mentions the use of a private key (
FITTINGS_PRIVATE_KEY), it correctly advises the user to use a throwaway wallet and provides standard guidance on setting environment variables for CLI tools rather than hardcoding actual secrets.
Audit Metadata