fittings-icd10-lookup
Warn
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download a remote JavaScript file (
call.mjs) from the vendor's domain (fittings.sh) and execute it using Node.js to handle API calls and payments. - [COMMAND_EXECUTION]: The skill uses
curlandnodeto interact with the API and execute the settlement client directly from the command line. - [CREDENTIALS_UNSAFE]: The skill instructs the user to set a blockchain private key (
FITTINGS_PRIVATE_KEY) in an environment variable. The documentation acknowledges that this key is stored in plaintext where the agent runs, posing a risk of credential exposure if the environment is compromised.
Audit Metadata