fittings-sec-ticker-financials
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an execution script (
call.mjs) from the vendor's official domain athttps://fittings.sh/skill/call.mjs. This is documented as a helper utility for the service. - [REMOTE_CODE_EXECUTION]: The instructions guide the user to execute the downloaded JavaScript file using
nodeto interact with the financial data endpoint and handle payment quotes. - [CREDENTIALS_UNSAFE]: The skill requires a private key stored in the
FITTINGS_PRIVATE_KEYenvironment variable to facilitate USDC payments on the Base network. The documentation includes a security warning advising the use of a throwaway wallet holding minimal funds.
Audit Metadata