integrate-unprice-sdk
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
@unprice/apiNode.js package using the host project's package manager. It also references an official OpenAPI specification and documentation hosted atdocs.unprice.devto ensure type safety and contract adherence. - [COMMAND_EXECUTION]: The instructions require the agent to execute standard development tools within the host project environment, including package managers (npm, yarn, pnpm), linters, formatters, and test runners (e.g., vitest or jest) to verify the integration code.
- [DATA_EXFILTRATION]: The skill contains explicit defensive instructions to prevent data exfiltration and credential exposure. It mandates keeping
UNPRICE_TOKENserver-side, excluding it from logs, browser bundles, public variables, and committed files, and advises using established project-specific environment validation mechanisms. - [SAFE]: The skill's primary function is to guide the integration of a commercial billing service. All external references and dependencies are scoped to the
unprice.devdomain and the official@unprice/apipackage, representing expected and legitimate functionality for a developer-oriented skill.
Audit Metadata