fittings-rxclass-drug-classes
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a JavaScript utility script (
call.mjs) from the official vendor domainhttps://fittings.sh/skill/call.mjs. This script is required to interface with the metered API and handle payment signatures. - [COMMAND_EXECUTION]: The agent is instructed to execute the utility script using
nodeto perform drug lookups. The command patterns are consistent with the skill's stated purpose of drug classification lookup. - [CREDENTIALS_UNSAFE]: The skill utilizes the
FITTINGS_PRIVATE_KEYenvironment variable to manage payments for API calls. The documentation provides proactive security guidance, advising users to use a throwaway wallet with limited funds and to set aFITTINGS_MAX_PRICEcap to prevent unexpected charges.
Audit Metadata