qr-encode
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill processes arbitrary text input through its
textparameter to generate QR codes, creating a surface for indirect prompt injection if the output is processed by downstream systems or users.\n - Ingestion points: The
textfield in the POST request defined inSKILL.md.\n - Boundary markers: Absent.\n
- Capability inventory: Network communication with
fittings.shand local file system read access for integrity checks.\n - Sanitization: None present; the skill encodes provided text directly into the QR matrix.\n- [EXTERNAL_DOWNLOADS]: The skill documentation suggests downloading an execution script from
fittings.shviacurl. At runtime, the script also fetches an integrity hash from the same domain to verify its source code.\n- [DATA_EXFILTRATION]: The execution script accesses theFITTINGS_PRIVATE_KEYenvironment variable to sign payment challenges. These signed authorizations are then transmitted back to thefittings.shAPI to settle transaction costs for the QR generation service.
Audit Metadata