license-keys
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical integration guide for licensing features without any malicious intent or hidden code.
- [EXTERNAL_DOWNLOADS]: The skill references official developer documentation and API resources from the dodopayments.com domain, which corresponds to the vendor's own infrastructure. These references are used appropriately for instructional purposes and SDK functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points for untrusted data, specifically license keys from user interfaces (React and CLI) and raw request bodies in webhook handlers. The capability inventory includes network operations via the vendor SDK and local file persistence using standard libraries like electron-store and conf. Sanitization is correctly demonstrated through the implementation of webhook signature verification using the vendor's SDK tools. Prompt boundary markers are not applicable as the skill focuses on programmatic integration rather than direct LLM instruction generation.
Audit Metadata