polar-integration

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The documentation includes instructions for installing the Polar CLI using curl -fsSL https://polar.sh/install.sh | bash. This targets the official domain of the service being integrated and is a standard installation procedure.
  • [INDIRECT_PROMPT_INJECTION]: The skill guides the implementation of webhook handlers that ingest external event data. It provides clear documentation and code examples for mitigating potential injection risks through cryptographic signature validation using official SDK helper functions.
  • [CREDENTIALS_UNSAFE]: The skill references the use of API tokens and webhook secrets but consistently uses non-sensitive placeholders. It reinforces secure practices by instructing users to manage credentials through environment variables and dedicated configuration files, and references OWASP secret management guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 10:37 AM