time-zone-clock
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include a command to download the
call.mjshelper script directly from the vendor's domain.- [CREDENTIALS_UNSAFE]: The execution script is designed to read and use a plaintext Ethereum private key from theFITTINGS_PRIVATE_KEYenvironment variable to sign payment authorizations.- [REMOTE_CODE_EXECUTION]: The providedcall.mjsscript performs a self-integrity check by fetching a SHA256 hash from a remote server and comparing it to its own content, advising a re-download if they differ.- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands and run a Node.js script to perform its function, including network interactions and cryptographic signing.
Audit Metadata