The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill downloads an external script from the vendor's domain (https://fittings.sh/skill/call.mjs) and executes it using node. This pattern allows the execution of code that is managed outside of the skill's distribution.\n- [CREDENTIALS_UNSAFE]: Instructions direct the user to set a private key in the FITTINGS_PRIVATE_KEY environment variable. While the skill recommends using a throwaway wallet, this practice exposes sensitive cryptographic keys to the local environment and the executed script.\n- [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch scripts and metadata from the fittings.sh domain.\n- [COMMAND_EXECUTION]: Shell commands including curl and node are used to perform network requests and execute the downloaded client logic.

fittings-kev-recent