fittings-hazard-active-events
Warn
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a JavaScript utility from the vendor's domain at
https://fittings.sh/skill/call.mjsusingcurl. - [REMOTE_CODE_EXECUTION]: The instructions direct the agent to execute the downloaded
call.mjsscript directly using thenoderuntime. This facilitates the execution of remote code that is not bundled with the skill's source content. - [CREDENTIALS_UNSAFE]: The skill instructs the user to set a sensitive private key in the
FITTINGS_PRIVATE_KEYenvironment variable. It explicitly acknowledges that this key resides in plaintext within the agent's execution environment, which is a significant security risk for credential exposure. - [COMMAND_EXECUTION]: The skill utilizes high-privilege shell commands including
curlfor network downloads andnodefor script execution. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests external data from the NASA EONET v3 API via the
fittings.shgateway (SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the hazard data as untrusted content.
- Capability inventory: The skill has access to shell execution (
curl,node) and environment variable management (SKILL.md). - Sanitization: There is no evidence of sanitization or schema validation performed on the retrieved event geometries or descriptions before processing.
Audit Metadata