The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill requires a blockchain private key to be provided via the FITTINGS_PRIVATE_KEY environment variable. This key is used to sign payment authorizations for the x402 protocol. While the documentation warns users to use a throwaway wallet, storing private keys in environment variables is a sensitive practice that increases the risk of credential exposure.
[EXTERNAL_DOWNLOADS]: The SKILL.md instructions recommend fetching the call.mjs helper script from https://fittings.sh/skill/call.mjs using curl. This script is central to the skill's functionality, including handling the payment handshake.
[COMMAND_EXECUTION]: The skill's primary interface is the execution of the call.mjs Node.js script, which performs network requests and cryptographic signing based on user-provided arguments.
[DATA_EXPOSURE]: The call.mjs script reads its own file content from the local disk to generate a SHA256 hash. This hash is then compared with a remote value from the vendor's server to ensure the client logic is current before any transaction is signed.

npi-provider-lookup