faers-adverse-events
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download an executable script (call.mjs) from a remote vendor domain. It also fetches a remote hash to verify and potentially trigger updates of local code.
- [COMMAND_EXECUTION]: The skill relies on the execution of a Node.js script that performs network operations and cryptographic signing.
- [DATA_EXFILTRATION]: The script accesses a sensitive private key from environment variables (FITTINGS_PRIVATE_KEY) to authorize payments. This involves signing challenges and sending the results to an external API endpoint.
Audit Metadata