payment-integration
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of legitimate developer resources, including integration guides and helper scripts. No malicious intent or suspicious code was found during the analysis.
- [SAFE]: Authentication and secret management follow security best practices by utilizing environment variables and providing templates for
.envfiles rather than hardcoding credentials. - [SAFE]: The provided webhook verification scripts (
scripts/sepay-webhook-verify.js,scripts/polar-webhook-verify.js) implement cryptographic signature checks (HMAC-SHA256) to ensure the authenticity of incoming payment notifications. - [SAFE]: External service references and API endpoints are directed towards official, well-known payment infrastructure providers.
Audit Metadata