flutterwave-verification

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive credentials by retrieving the FLW_SECRET_KEY from environment variables (process.env) rather than hardcoding them in the source code.
  • [DATA_EXFILTRATION]: Network activity is restricted to official Flutterwave API domains (api.flutterwave.com and developersandbox-api.flutterwave.com) for the purpose of account verification as described in the skill's metadata. No sensitive local files are accessed or transmitted.
  • [EXTERNAL_DOWNLOADS]: No external scripts, packages, or executable binaries are downloaded or executed by this skill.
  • [PROMPT_INJECTION]: The instructions and implementation code do not contain any patterns intended to bypass safety filters, extract system prompts, or override agent instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 01:27 PM