geo-elevation
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
call.mjsto interact with thefittings.shAPI. This script executes shell commands to perform network requests and handle cryptographic signing of payment authorizations. - [REMOTE_CODE_EXECUTION]: The
SKILL.mdfile suggests fetching the latest version of thecall.mjsscript usingcurlif it is missing. This is a standard procedure for maintaining tool updates and targets the vendor's official domain. - [EXTERNAL_DOWNLOADS]: The skill downloads configuration and data from
fittings.sh, which is the vendor's official infrastructure. These operations are essential for the skill's primary function of providing geographic data. - [CREDENTIALS_UNSAFE]: The skill documentation provides clear instructions for managing sensitive data, advising the use of a
FITTINGS_PRIVATE_KEYenvironment variable and recommending the use of a throwaway wallet for security.
Audit Metadata