The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The call.mjs script retrieves a private key from the FITTINGS_PRIVATE_KEY environment variable. This key is used locally to sign payment authorizations for USDC transactions on the Base network. The documentation includes security warnings, advising users to use a throwaway wallet and noting that the key is stored in plaintext.
[EXTERNAL_DOWNLOADS]: The skill instructions provide a method to download the call.mjs execution script from the vendor's domain (https://fittings.sh/skill/call.mjs). This is a legitimate download of the skill's own operational code.
[REMOTE_CODE_EXECUTION]: The call.mjs script requires the installation of several external Node.js packages (@x402/fetch, @x402/evm, and viem) to handle the x402 payment handshake and blockchain communication. These dependencies are imported dynamically at runtime.
[COMMAND_EXECUTION]: The skill facilitates interactions with the remote service by executing the call.mjs script using the Node.js runtime. This involves processing command-line arguments and managing environment variables.

addr-standardize