setup-bayarcash
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the
webimpian/bayarcash-php-sdkusing Composer and references official WordPress plugins. These resources are associated with the service provider. - [COMMAND_EXECUTION]: The documentation includes commands for the user to set up API secrets using
npx wranglerand to manage PHP dependencies viacomposer. These are standard procedures for developing payment integrations. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill is designed to handle external data from payment callbacks and transaction metadata.
- Boundary markers: The instructions focus on structured data handling but do not specify prompt-level delimiters.
- Capability inventory: The skill facilitates payment processing and status updates but does not include dynamic execution of data.
- Sanitization: Mandatory checksum verification using HMAC SHA256 is instructed for all callback data to prevent tampering and unauthorized instructions.
Audit Metadata