product-catalog-management
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for the Dodo Payments SDK. All external resources, including API domains (dodopayments.com) and short links (dodo.link), are official vendor resources associated with the author 'dodopayments'.
- [CREDENTIALS_UNSAFE]: The code examples correctly demonstrate using environment variables (
process.env.DODO_PAYMENTS_API_KEY) for authentication rather than hardcoding sensitive credentials. - [COMMAND_EXECUTION]: The skill uses standard file system access (
fs.readFileSync) to read a local image file for the purpose of uploading it to the product catalog, which is consistent with the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The skill uses
fetchto upload data to a presigned URL generated by the Dodo Payments API. This is a standard and secure method for handling file uploads to cloud storage.
Audit Metadata