nfeio-php-sdk
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the official NFE.io PHP SDK (Composer package
nfe/nfe) and its associated API endpoints (e.g.,api.nfe.io,api.nfse.io). All referenced resources are consistent with the vendor identity 'nfe'. - [SAFE]: Instructions for handling API keys recommend using environment variables (
$_ENV['NFE_API_KEY']) rather than hardcoding credentials, which is a security best practice. - [SAFE]: The skill includes detailed instructions for secure webhook implementation, emphasizing the use of the static
Nfe\Webhook::verifySignaturemethod to validate incoming requests using HMAC-SHA1 and a shared secret. - [SAFE]: Documentation provides explicit warnings about destructive operations, such as the
deleteAllAccountWebhooks()method, reducing the risk of accidental configuration loss.
Audit Metadata