dailymed-spl-fetch
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches its primary client script (
call.mjs) and integrity hashes from the vendor's official domain atfittings.sh. - [EXTERNAL_DOWNLOADS]: The client script relies on standard external Node.js dependencies for blockchain interaction, including
viemand the@x402protocol libraries. - [COMMAND_EXECUTION]: The skill uses a Node.js script to process API requests and generate cryptographic signatures for payment authorizations. This script includes a self-integrity check that compares its local hash against the vendor's remote registry before signing transactions.
- [DATA_EXFILTRATION]: The script performs a payment handshake with the
fittings.shgateway. This process involves sending signed payment authorizations to the vendor's infrastructure to settle API costs as intended by the skill's primary function.
Audit Metadata