fda-drug-label
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs downloading the execution script
call.mjsand its SHA-256 checksum directly from the vendor domainfittings.sh. - [COMMAND_EXECUTION]: Operation of the skill requires executing the downloaded JavaScript file using the Node.js runtime to interact with the API.
- [CREDENTIALS_UNSAFE]: The system relies on the
FITTINGS_PRIVATE_KEYenvironment variable to sign payment authorizations for the x402 protocol. Storing and using raw private keys in environment variables is a high-risk activity, though the documentation mitigates this by recommending the use of a throwaway wallet with minimal funds. - [REMOTE_CODE_EXECUTION]: The execution script (
call.mjs) dynamically imports external packages@x402/fetch,@x402/evm, andviemto handle cryptographic signing and networking. - [PROMPT_INJECTION]: The skill ingests drug label data from the openFDA API via the vendor's gateway. There are no explicit boundary markers or sanitization logic to prevent potential malicious instructions embedded in drug labels from influencing the agent's behavior, although the risk is low given the official data source.
Audit Metadata