create-paykit
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
pnpm add paykitjs @paykitjs/stripeandnpx paykitjs push. These commands are used to install dependencies and synchronize the database and Stripe schema, which is standard and expected behavior for a development scaffolding tool. - [DATA_EXPOSURE]: The skill identifies and checks for sensitive configuration keys such as
DATABASE_URL,STRIPE_SECRET_KEY, andSTRIPE_WEBHOOK_SECRETwithin local.envfiles. This is used solely to verify the local development environment; there is no evidence of these secrets being exfiltrated or transmitted to external servers. - [EXTERNAL_DOWNLOADS]: The skill initiates the download and installation of
paykitjsand@paykitjs/stripevia thepnpmpackage manager. These packages are official libraries provided by the skill author (getpaykit) and are essential for the integration's functionality.
Audit Metadata