flutterwave-transfers

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation correctly uses environment variables (process.env.FLW_SECRET_KEY) to manage sensitive API credentials rather than hardcoding them, which is a security best practice.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to official Flutterwave API domains (api.flutterwave.com and developersandbox-api.flutterwave.com) for its core functionality. These are well-known, legitimate service endpoints.
  • [COMMAND_EXECUTION]: No shell command execution or subprocess spawning was detected in the skill code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 11:52 PM