flutterwave-verification
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive credentials by retrieving the FLW_SECRET_KEY from environment variables (process.env) rather than hardcoding them in the source code.
- [DATA_EXFILTRATION]: Network activity is restricted to official Flutterwave API domains (api.flutterwave.com and developersandbox-api.flutterwave.com) for the purpose of account verification as described in the skill's metadata. No sensitive local files are accessed or transmitted.
- [EXTERNAL_DOWNLOADS]: No external scripts, packages, or executable binaries are downloaded or executed by this skill.
- [PROMPT_INJECTION]: The instructions and implementation code do not contain any patterns intended to bypass safety filters, extract system prompts, or override agent instructions.
Audit Metadata