freemius-customer-portal
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing UI components from
https://shadcn.freemius.com/all.json. This is a vendor-controlled domain used for distributing official project templates and does not pose a security risk in this context. - [COMMAND_EXECUTION]: Includes instructions for building a backend endpoint using the Freemius SDK to process customer portal requests. The logic uses standard web-standard Request/Response objects and incorporates authentication middleware.
- [CREDENTIALS_UNSAFE]: Provides clear instructions to keep sensitive information, such as Freemius API keys and license secret keys, on the server-side. It explicitly warns against exposing these credentials in the frontend or browser environment.
- [DATA_EXFILTRATION]: Network communication is restricted to the application's own API and the Freemius platform. Sensitive actions like cancellations and billing updates are protected using pre-signed URLs that are verified by the backend processor.
Audit Metadata