The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The implementation follows security best practices by referencing environment variables (FLW_SECRET_KEY) for authentication instead of hardcoding secrets. It makes network requests to official Flutterwave domains (api.flutterwave.com and developersandbox-api.flutterwave.com), which are recognized as well-known technology service domains.
[INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external API data. While this creates a theoretical ingestion surface for untrusted content, the provided code handles the data programmatically via standard JSON parsing without evidence of unsafe prompt interpolation.
[SAFE]: Analysis of the skill instructions and code snippets reveals no evidence of prompt injection, obfuscation, unauthorized persistence, or privilege escalation. All external references point to official developer documentation.

flutterwave-bills