Skills
Navigate
skills/fittings-sh/fittings/fittings-fmt-csv-to-json/Gen Agent Trust Hub

fittings-fmt-csv-to-json

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official vendor resources, including a JavaScript module at https://fittings.sh/skill/call.mjs and NPM packages @x402/core and @x402/evm used for metered payment handling.\n- [COMMAND_EXECUTION]: The documentation includes example curl commands to query the service catalog and perform dry-run conversions against the fittings.sh API.\n- [PROMPT_INJECTION]: The skill processes external CSV data, representing a surface for indirect prompt injection.\n
  • Ingestion points: The csv parameter in the JSON request body directed to the conversion endpoint.\n
  • Boundary markers: None specified in the instructions.\n
  • Capability inventory: The skill facilitates network communication with the vendor's API.\n
  • Sanitization: No data validation or sanitization routines are defined in the skill logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 10:32 PM