paypal-integration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The code snippets utilize placeholders for sensitive credentials (
YOUR_CLIENT_ID,YOUR_CLIENT_SECRET), following best practices for secret management and preventing accidental exposure. - [EXTERNAL_DOWNLOADS]: The skill references the official PayPal JavaScript SDK from
www.paypal.com. As this is a well-known and trusted service for payment processing, this download is categorized as safe. - [INDIRECT_PROMPT_INJECTION]: The skill includes a backend handler for PayPal Instant Payment Notifications (IPN). While this involves processing external data, the provided implementation includes a verification routine (
verify_ipn) that validates the notification directly with PayPal's servers, which is the industry-standard method for ensuring data integrity.
Audit Metadata