payment-integration
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and implement payment logic based on user-provided code or specifications. This ingestion of external data creates a surface for indirect prompt injection if the processed content contains malicious instructions targeting the agent's logic.
- Ingestion points: User-provided payment workflows and checkout implementation code.
- Boundary markers: The skill uses a structured 'Working mode' and specific 'Quality checks', but does not define explicit delimiters to isolate untrusted input.
- Capability inventory: The skill is configured with
sandbox_mode: workspace-write, allowing it to modify files and implement code recommendations. - Sanitization: No specific filtering or sanitization steps are defined for the incoming data.
- [SAFE]: The skill instructions explicitly promote secure coding practices, including webhook trust verification, PCI-sensitive boundary hygiene, and idempotency management. It includes a safety constraint preventing the relaxation of payment controls unless explicitly directed by a parent agent.
Audit Metadata