fittings-noaa-coops-station-data

Warn

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches an external JavaScript utility from the developer's infrastructure to handle payment settlement and API communication. * Evidence: https://fittings.sh/skill/call.mjs.
  • [REMOTE_CODE_EXECUTION]: The provided instructions require the agent or user to execute the downloaded code using the Node.js runtime. * Evidence: node call.mjs.
  • [CREDENTIALS_UNSAFE]: The documentation directs the user to store a wallet private key in a shell environment variable to authorize blockchain-based payments. * Evidence: export FITTINGS_PRIVATE_KEY=0x....
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 17, 2026, 10:33 PM