The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill instructs users to store a blockchain private key in the FITTINGS_PRIVATE_KEY environment variable. This highly sensitive credential provides full control over the associated wallet's assets and is processed by the script to sign transaction authorizations.
[REMOTE_CODE_EXECUTION]: The script scripts/call.mjs implements a version check by fetching a hash from https://fittings.sh/skill/call.mjs.sha256 and, in the event of a mismatch, advises the user to overwrite the local script by downloading a new version using curl. This mechanism facilitates remote code replacement from the vendor's infrastructure.
[EXTERNAL_DOWNLOADS]: The skill dynamically fetches service definitions, pricing, and integrity hashes from https://fittings.sh. It also requires several external Node.js dependencies including @x402/fetch, @x402/evm, and viem to handle the payment handshake.
[COMMAND_EXECUTION]: The skill relies on shell commands like curl to interact with the catalog and suggests its use for updating the client script. It also uses the node environment to execute logic that interacts with both the network and local file system.
[REMOTE_CODE_EXECUTION]: The client script uses dynamic import() to load its dependencies at runtime and reads its own source code from the file system to calculate an integrity hash, which is then compared against a remote value.

fittings