uniweb
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for integrating the uniweb payment service.
- It includes explicit security warnings against hardcoding sensitive API keys (e.g., sk_live_) and recommends using server-side environment variables.
- It promotes the use of verified webhooks for payment fulfillment, providing a standard signature verification implementation via the SDK.
- The dependencies (@uniwebpay/cli and @uniwebpay/sdk) and the API domains (uniwebpay.com) are official vendor resources associated with the skill's functionality.
- Commands provided for CLI installation and usage are restricted to standard package managers and do not use high-risk patterns like piped remote scripts.
Audit Metadata