rxnorm-ndc-crosswalk
Warn
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill documentation instructs users to export a sensitive private key (FITTINGS_PRIVATE_KEY) as an environment variable. This is a high-risk practice as environment variables can be leaked via process monitoring, logging, or debugging tools.
- [EXTERNAL_DOWNLOADS]: The skill requires downloading a management script call.mjs from the fittings.sh domain and relies on external Node.js dependencies including @x402/fetch, @x402/evm, and viem.
- [REMOTE_CODE_EXECUTION]: The skill executes the downloaded call.mjs script to handle API requests and blockchain signatures. The script includes a self-integrity check that fetches a hash from the vendor server to verify its own bytes.
- [COMMAND_EXECUTION]: Users are directed to execute shell commands using node to run the payment and crosswalk logic, involving the interpolation of environment variables and CLI arguments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes drug identifiers through command-line arguments that are then interpolated into API requests. Ingestion points: Arguments passed to call.mjs via process.argv. Boundary markers: None present. Capability inventory: Performs network requests and blockchain signing. Sanitization: Implements basic type coercion for numbers and JSON but lacks string sanitization for injection patterns.
Audit Metadata