epa-tri-releases
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill requires a raw Ethereum private key to be set in the FITTINGS_PRIVATE_KEY environment variable. The documentation notes that this key remains in plaintext in the execution environment, which increases the risk of accidental exposure or theft.
- [EXTERNAL_DOWNLOADS]: The skill suggests a method to download its execution script (call.mjs) from the vendor's domain (https://fittings.sh). This represents a remote acquisition of executable code from vendor infrastructure.
- [COMMAND_EXECUTION]: The skill functions by executing a Node.js script that handles network requests and performs local cryptographic signing of payment authorizations.
- [PROMPT_INJECTION]: The skill processes data from a remote API, creating an indirect prompt injection surface. 1. Ingestion points: API responses from fittings.sh. 2. Boundary markers: None identified. 3. Capability inventory: Shell command execution via node call.mjs. 4. Sanitization: The script parses the response as JSON but does not sanitize the text content for potential instructions.
Audit Metadata