The Agent Skills Directory

[SAFE]: The skill provides detailed instructions for integrating with É-kwanza and AppyPay payment APIs. It incorporates strong security measures by documenting and providing code for HMAC-SHA256 signature verification.
[SAFE]: No hardcoded credentials or API keys were detected. The documentation explicitly advises against hardcoding secrets and demonstrates using NestJS ConfigService with environment variables.
[SAFE]: The provided cryptographic helper scripts use security best practices, such as constant-time comparison (timingSafeEqual) for signature verification to protect against timing side-channel attacks.
[SAFE]: All external domains referenced (login.microsoftonline.com, appypay.co.ao) are legitimate identity and payment gateway services associated with the skill's stated purpose.

ekwanza