fittings-spatial-nearest-point
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides example curl commands to interact with the API at fittings.sh. These are standard API interaction examples and do not involve malicious piping or obfuscation.
- [CREDENTIALS_UNSAFE]: Mentions the use of a FITTINGS_PRIVATE_KEY for payment settlement. The documentation includes security advisories, such as using a throwaway wallet with minimal funds and acknowledging that the key resides in plaintext in the agent's environment.
- [EXTERNAL_DOWNLOADS]: References external NPM packages @x402/core and @x402/evm, as well as a JavaScript file at fittings.sh/skill/call.mjs. These resources are part of the vendor's payment infrastructure.
- [DATA_EXFILTRATION]: Transmits coordinate data to the vendor's endpoint fittings.sh to perform spatial calculations. This transmission is central to the skill's stated purpose.
Audit Metadata