fittings-ghsa-advisory
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a helper script from the official vendor domain at https://fittings.sh/skill/call.mjs to facilitate API communication.
- [REMOTE_CODE_EXECUTION]: It uses Node.js to execute the downloaded helper script for making security advisory lookups.
- [COMMAND_EXECUTION]: The skill provides command-line instructions for downloading files, setting environment variables, and running software as part of its normal operation.
Audit Metadata