fittings-fcc-census-block
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download a client script (call.mjs) from the vendor's domain fittings.sh to facilitate API calls and payment processing.
- [COMMAND_EXECUTION]: The downloaded JavaScript file is executed using node to perform the census block lookup based on coordinates.
- [CREDENTIALS_UNSAFE]: The documentation describes the use of an environment variable (FITTINGS_PRIVATE_KEY) to hold a wallet private key for automated payments. It includes a specific security recommendation to use a throwaway wallet rather than a primary one to mitigate risk.
Audit Metadata