fittings-dailymed-spl-fetch
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches an execution script from the vendor's domain at
https://fittings.sh/skill/call.mjs.- [REMOTE_CODE_EXECUTION]: Executes the downloadedcall.mjsscript using thenodeenvironment to facilitate API calls and payment processing.- [COMMAND_EXECUTION]: Usescurlto interact with the vendor's API catalog and retrieve the necessary execution script.- [INDIRECT_PROMPT_INJECTION]: - Ingestion points: Data is ingested from the external API endpoint
https://fittings.sh/v1/dailymed/spl-fetch. - Boundary markers: No explicit boundary markers or instructions to ignore embedded directives are present for the processed API data.
- Capability inventory: The skill can execute shell commands (
curl) and run Node.js scripts. - Sanitization: No explicit sanitization or validation of the remote API content is described.
Audit Metadata