paypal-integration
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill contains standard integration code for PayPal using well-known libraries and APIs.
- [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders (e.g., "YOUR_CLIENT_ID", "YOUR_CLIENT_SECRET") for API credentials instead of hardcoding actual sensitive data.
- [EXTERNAL_DOWNLOADS]: The frontend JavaScript example includes the PayPal SDK from its official domain (www.paypal.com). This is a well-known service and the reference is for legitimate functional purposes.
- [DATA_EXFILTRATION]: Network operations in the provided Python and JavaScript snippets are restricted to official PayPal API endpoints (api-m.paypal.com, api-m.sandbox.paypal.com) for payment creation and verification.
Audit Metadata