flutterwave-transfers
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation correctly uses environment variables (
process.env.FLW_SECRET_KEY) to manage sensitive API credentials rather than hardcoding them, which is a security best practice. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to official Flutterwave API domains (
api.flutterwave.comanddevelopersandbox-api.flutterwave.com) for its core functionality. These are well-known, legitimate service endpoints. - [COMMAND_EXECUTION]: No shell command execution or subprocess spawning was detected in the skill code.
Audit Metadata