billing-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the vendor's CLI and the shadcn registry to fetch components from the official NPM registry and vendor GitHub repositories.
- [COMMAND_EXECUTION]: Instructions involve running npx commands for project initialization and component installation.
- [INDIRECT_PROMPT_INJECTION]: The skill handles plan selection data from the client. It provides mitigation logic by mapping public slugs to internal IDs on the server to prevent product tampering.
Audit Metadata