The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download a helper script (call.mjs) from https://fittings.sh/skill/call.mjs. This is a standard delivery mechanism for the vendor's own tooling.
[CREDENTIALS_UNSAFE]: The skill utilizes a private key stored in the FITTINGS_PRIVATE_KEY environment variable to sign blockchain transactions for API access. The author provides clear security guidance, recommending the use of throwaway wallets and disclosing that keys are stored in plaintext in the execution environment.
[REMOTE_CODE_EXECUTION]: Instructions involve downloading a script from the vendor's domain and executing it via node. As the source is the official vendor domain, this represents a standard installation and execution flow.
[COMMAND_EXECUTION]: The skill is designed to be executed via the command line to perform API lookups. The logic involves standard HTTP requests to the vendor's service domain.
[DATA_EXFILTRATION]: The script implements an integrity check by reading its own source code and comparing its hash against the vendor's server. This is a security feature intended to prevent the use of outdated or tampered logic during financial transactions.

epa-tri-facilities