wf-api-integration
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate development tool for generating integration code for WorldFirst financial services.
- [SAFE]: It implements secure authentication patterns including RSA256 digital signatures for both outgoing requests and incoming webhook notifications.
- [SAFE]: Documentation includes 'Security Red Lines' that provide clear instructions to prevent common vulnerabilities, such as hardcoding credentials or logging private keys.
- [SAFE]: All external documentation links and API endpoints reference official WorldFirst and Alipay developer domains.
- [SAFE]: Python dependencies specified in the templates (cryptography, requests) are standard, well-maintained libraries from trusted registries.
Audit Metadata