integrate-unprice-sdk

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the @unprice/api Node.js package using the host project's package manager. It also references an official OpenAPI specification and documentation hosted at docs.unprice.dev to ensure type safety and contract adherence.
  • [COMMAND_EXECUTION]: The instructions require the agent to execute standard development tools within the host project environment, including package managers (npm, yarn, pnpm), linters, formatters, and test runners (e.g., vitest or jest) to verify the integration code.
  • [DATA_EXFILTRATION]: The skill contains explicit defensive instructions to prevent data exfiltration and credential exposure. It mandates keeping UNPRICE_TOKEN server-side, excluding it from logs, browser bundles, public variables, and committed files, and advises using established project-specific environment validation mechanisms.
  • [SAFE]: The skill's primary function is to guide the integration of a commercial billing service. All external references and dependencies are scoped to the unprice.dev domain and the official @unprice/api package, representing expected and legitimate functionality for a developer-oriented skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 12:34 PM
Security Audit — agent-trust-hub — integrate-unprice-sdk