fittings-epss-score
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes a command to download the
call.mjsclient script from the vendor's official domain athttps://fittings.sh/skill/call.mjs. This is a standard setup procedure for this service. - [COMMAND_EXECUTION]: The skill instructs the agent to use
nodeto execute thecall.mjsscript, which processes API inputs and manages the connection to the service provider. - [SAFE]: The skill utilizes the
FITTINGS_PRIVATE_KEYenvironment variable to authorize metered payments for API usage. This is a functional requirement for the x402 payment protocol used by the vendor. The documentation provides clear guidance and security best practices, such as recommending the use of a dedicated throwaway wallet to minimize risk.
Audit Metadata