postedly-handwritten-card
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill implements appropriate guardrails for handling user data and interacting with the external Postedly service.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill uses established OAuth flows and dedicated MCP tools for service interaction. It correctly advises against requesting passwords or tokens in chat and emphasizes the use of hosted payment pages (Stripe Checkout) to keep financial data outside the conversation context.
- [PROMPT_INJECTION]: Instructions are focused on task execution and character counting. No attempt to bypass safety filters or override system behavior was found.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script execution or package installation.
Audit Metadata