fittings-ndbc-buoy-conditions
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a JavaScript client script (
call.mjs) directly from the vendor's infrastructure athttps://fittings.sh/skill/call.mjs. This script is used to interact with the paid API endpoint. - [COMMAND_EXECUTION]: The documentation provides shell commands (
curl,node,export) to download the client, set environment variables, and execute the data retrieval process. - [CREDENTIALS_UNSAFE]: The skill requires a
FITTINGS_PRIVATE_KEYenvironment variable to sign blockchain transactions for the $0.003 service fee. The instructions include specific security guidance, advising the use of a throwaway wallet with minimal funds rather than a primary wallet.
Audit Metadata