fittings-time
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local JavaScript file (
scripts/call.mjs) via the Node.js runtime to process date and time computations based on user requests. - [DATA_EXFILTRATION]: Performs network requests to the vendor's API endpoint (
fittings.sh) to retrieve calendar, holiday, and timezone data. This is the intended primary purpose of the skill. - [CREDENTIALS_UNSAFE]: Provides instructions for managing a blockchain private key via environment variables (
FITTINGS_PRIVATE_KEY) to authorize micro-payments for service calls. The skill includes explicit security warnings to avoid printing, committing, or exposing these credentials to the user.
Audit Metadata