pos-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate educational content and implementation patterns for commerce developers. It uses official SDKs (
squarenpm package) and standard security practices like HMAC signature verification for webhooks. - [EXTERNAL_DOWNLOADS]: References official, well-known services and plugins such as the 'WooCommerce Square' plugin from wordpress.org and the official 'square' NPM package. These are categorized as safe per established trust rules.
- [DATA_EXFILTRATION]: Code samples follow best practices by using environment variables (
process.env.SQUARE_ACCESS_TOKEN) rather than hardcoding credentials. - [COMMAND_EXECUTION]: No shell commands or risky execution patterns are present in the provided skill files.
- [INDIRECT_PROMPT_INJECTION]: While the skill handles external data (webhooks), the implementation samples include validation (HMAC verification) and structured data parsing, reducing the attack surface for injection through tool outputs.
Audit Metadata