fittings-fmt-json-flatten
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references resources hosted on the vendor's domain, including the main API endpoint at
fittings.sh/v1/fmt/json-flattenand a payment helper script atfittings.sh/skill/call.mjs. - [COMMAND_EXECUTION]: Provides documentation and examples for using
curlto interact with the remote API, including methods to inspect the service catalog and perform test requests. - [CREDENTIALS_UNSAFE]: Discusses the use of a
FITTINGS_PRIVATE_KEYfor off-chain payment signing. The documentation includes security best practices, such as recommending the use of throwaway wallets and alerting the user to the risks of plaintext environment variable storage.
Audit Metadata