tw-ecom-invoice-ezpay
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a methodology for issuing and managing invoices using a specialized MCP toolset.
- [SAFE]: Sensitive configuration parameters, including API Hash Keys and IVs, are managed via environment variable placeholders, following secure credential handling practices.
- [SAFE]: Implementation guidance emphasizes client-side validation using regular expressions to prevent malformed data from reaching external APIs.
- [SAFE]: External network references are restricted to official ezPay service domains and the Taiwan Ministry of Finance (MOF) platform, which are relevant to the skill's stated purpose.
- [SAFE]: No evidence of prompt injection, obfuscation, unauthorized persistence, or privilege escalation was found across the analyzed files.
Audit Metadata