license-keys
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for license management, serving as a developer resource.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The code examples correctly demonstrate best practices for secret management by using environment variables (e.g., process.env.DODO_PAYMENTS_API_KEY) instead of hardcoding credentials.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The use of device identifiers like os.hostname() and node-machine-id is consistent with the skill's purpose of managing hardware-linked license activations.
- [EXTERNAL_DOWNLOADS]: The skill references the dodopayments library, which is a resource owned by the authoring vendor. Other mentioned libraries such as electron-store, conf, prisma, and commander are standard tools for desktop and CLI development.
Audit Metadata