fittings-tz-offset-at
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download a helper script (
call.mjs) from the vendor's official website athttps://fittings.sh/skill/call.mjs. - [REMOTE_CODE_EXECUTION]: The downloaded script is executed via the
noderuntime to handle API communication and cryptographic signing for the x402 payment protocol. - [COMMAND_EXECUTION]: The skill uses
curlto fetch metadata and the payment client, followed bynodeto run the client script in the agent's environment. - [DYNAMIC_EXECUTION]: The skill demonstrates a pattern of fetching and running external code at runtime to perform its primary function of payment-facilitated API calls.
Audit Metadata