payments-handbook
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is purely instructional, focusing on security best practices for handling payment data and maintaining PCI compliance boundaries.
- [SAFE]: It explicitly warns against anti-patterns such as storing raw card data (PAN, CVV) or logging sensitive secrets like client_secrets.
- [SAFE]: All external links point to the vendor's own official GitHub and npm repositories, consistent with the skill's authorship.
- [SAFE]: The frontmatter restricts tools to 'read-only', preventing the agent from performing unauthorized file modifications or system changes.
Audit Metadata