payment-reconciliation-automation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation guides for payment reconciliation using well-known services (Stripe, PayPal, Shopify, QuickBooks, Xero). No executable code is provided within the skill itself, and all external references target legitimate financial technology vendors.
- [EXTERNAL_DOWNLOADS]: Mentions third-party connectors (A2X, Synder) which are well-known, trusted industry solutions for accounting automation. This falls under the trusted/well-known source exception.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverifiable dependencies detected. The code snippets provided in the documentation are for illustrative architectural purposes and use standard SDK patterns.
- [DATA_EXFILTRATION]: No data exfiltration patterns detected. The logic focuses on internal matching between order databases and financial processor APIs for the purpose of reconciliation.
- [COMMAND_EXECUTION]: No shell command execution or system-level operations detected.
- [PROMPT_INJECTION]: No prompt injection or system-override instructions found.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials detected. The evaluation tasks correctly reference the use of environment variables for API keys.
Audit Metadata