The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions include a step to fetch the call.mjs helper script from the vendor's domain at https://fittings.sh/skill/call.mjs.
[REMOTE_CODE_EXECUTION]: The call.mjs script dynamically imports several Node.js packages at runtime, including @x402/fetch, @x402/evm, and viem, to handle cryptographic operations and API communication. It also performs an automated integrity check by fetching and comparing a SHA256 hash from https://fittings.sh/skill/call.mjs.sha256.
[COMMAND_EXECUTION]: The skill relies on executing the call.mjs script within a Node.js environment to process the payment handshake and the API request.
[DATA_EXFILTRATION]: The skill accesses a wallet private key through the FITTINGS_PRIVATE_KEY environment variable to generate cryptographic signatures. these signatures are subsequently transmitted to the fittings.sh service to authorize payments for the distance calculation.

geo-distance