fittings-fec-financial-totals
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill instructs the user to download a JavaScript file (
call.mjs) fromhttps://fittings.sh/skill/call.mjsand execute it locally using thenodecommand. While the source is the vendor's own domain, this pattern involves executing unverified remote code. - [DATA_EXPOSURE_AND_EXFILTRATION]: The instructions guide the user to store a blockchain private key in the
FITTINGS_PRIVATE_KEYenvironment variable. Although the skill suggests using a throwaway wallet, this sensitive credential becomes accessible to the agent and the executed scripts. - [INDIRECT_PROMPT_INJECTION]: The skill fetches structured financial data from the FEC via the fittings.sh gateway. This external data is ingested into the agent's context, presenting a potential surface for indirect prompt injection if the source data were compromised.
- [DYNAMIC_EXECUTION]: The skill utilizes a dynamically downloaded script (
call.mjs) to handle API logic and payment signing at runtime.
Audit Metadata