fittings-rdap-domain

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill downloads a helper client from the vendor's official domain at https://fittings.sh/skill/call.mjs.- [REMOTE_CODE_EXECUTION]: The downloaded script is executed using node to perform API calls and handle payment signing.- [CREDENTIALS_UNSAFE]: The skill requires a FITTINGS_PRIVATE_KEY environment variable to pay for registration data lookups. The documentation explicitly recommends using a throwaway wallet holding minimal funds to mitigate risk.

Audit Metadata

Risk Level

SAFE

Analyzed

Aug 17, 2026, 10:33 PM