metr-merchant-payments
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration instructions for the Metr payment service (metrpay.com). All network operations via
curlare directed to the official API base (api.metr.app), which is consistent with the skill's stated purpose. - [SAFE]: Secret management instructions advise the user to store API keys in the platform's secure environment variable storage (
METR_MERCHANT_API_KEY,METR_AGENT_KEY). This follows industry best practices and avoids hardcoding credentials or exposing sensitive local files. - [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were detected. The skill acts as a standard technical reference for payment session management.
Audit Metadata