geo-elevation

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses call.mjs to interact with the fittings.sh API. This script executes shell commands to perform network requests and handle cryptographic signing of payment authorizations.
  • [REMOTE_CODE_EXECUTION]: The SKILL.md file suggests fetching the latest version of the call.mjs script using curl if it is missing. This is a standard procedure for maintaining tool updates and targets the vendor's official domain.
  • [EXTERNAL_DOWNLOADS]: The skill downloads configuration and data from fittings.sh, which is the vendor's official infrastructure. These operations are essential for the skill's primary function of providing geographic data.
  • [CREDENTIALS_UNSAFE]: The skill documentation provides clear instructions for managing sensitive data, advising the use of a FITTINGS_PRIVATE_KEY environment variable and recommending the use of a throwaway wallet for security.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 05:17 AM