Skills
Navigate
skills/fittings-sh/fittings/fittings-fda-drug-recall/Gen Agent Trust Hub

fittings-fda-drug-recall

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches a JavaScript execution client from the vendor's domain to facilitate API calls.
  • Evidence: curl -sO https://fittings.sh/skill/call.mjs in SKILL.md
  • [REMOTE_CODE_EXECUTION]: Instructs the execution of the downloaded client script using Node.js.
  • Evidence: node call.mjs fda.drug-recall ... in SKILL.md
  • [COMMAND_EXECUTION]: Uses curl to retrieve service catalog information and download tools.
  • Evidence: curl -s https://fittings.sh/catalog/fda.drug-recall | jq in SKILL.md
  • [CREDENTIALS_UNSAFE]: Requests the configuration of a FITTINGS_PRIVATE_KEY environment variable for payment settlement.
  • Evidence: The skill documentation describes setting the key to authorize USDC payments on the Base network.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 10:32 PM