polar-integration
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation includes instructions for installing the Polar CLI using
curl -fsSL https://polar.sh/install.sh | bash. This targets the official domain of the service being integrated and is a standard installation procedure. - [INDIRECT_PROMPT_INJECTION]: The skill guides the implementation of webhook handlers that ingest external event data. It provides clear documentation and code examples for mitigating potential injection risks through cryptographic signature validation using official SDK helper functions.
- [CREDENTIALS_UNSAFE]: The skill references the use of API tokens and webhook secrets but consistently uses non-sensitive placeholders. It reinforces secure practices by instructing users to manage credentials through environment variables and dedicated configuration files, and references OWASP secret management guidelines.
Audit Metadata