flutterwave-beneficiaries
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and boilerplate code for integrating with the Flutterwave API (v3 and v4).
- [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation pattern correctly utilizes environment variables (process.env.FLW_SECRET_KEY) for sensitive credentials, which is a standard and recommended security practice.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Network requests are directed to official Flutterwave domains (api.flutterwave.com and developersandbox-api.flutterwave.com).
- [INDIRECT_PROMPT_INJECTION]: The skill defines a standard pattern for processing API responses (FlwResponse). While any tool that ingests external data has a theoretical surface for indirect prompt injection, this skill does not implement any exploitable logic and follows typical API integration patterns.
Audit Metadata