doc-html-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and examples for using
curlandnodeto interact with its API. These commands are standard for developer tools and are used to fetch service catalogs or execute the provided client script. - [EXTERNAL_DOWNLOADS]: The documentation mentions fetching a helper script
call.mjsfromhttps://fittings.shif it is missing. This is a reference to the vendor's own infrastructure and is used for the skill's primary functionality. - [CREDENTIALS_UNSAFE]: The skill uses an environment variable
FITTINGS_PRIVATE_KEYto sign payment authorizations. The documentation correctly advises using a throwaway wallet and warns that the key resides in plaintext where the agent runs, which is a standard operational risk for CLI-based crypto-tooling rather than a malicious pattern.
Audit Metadata