inflow-payments
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides robust security guidance to prevent merchant API key leakage, specifically warning against exposing sensitive variables via framework-specific prefixes like NEXT_PUBLIC_ or VITE_.
- [EXTERNAL_DOWNLOADS]: Fetches the InFlow SDK from the vendor's official sandbox domain (https://sandbox.inflowpay.ai/sdk/inflow.js) for rendering payment popups.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data via webhooks, establishing an indirect prompt injection surface.
- Ingestion points: Backend webhook handler endpoint.
- Boundary markers: Absent.
- Capability inventory: The skill performs network requests to the InFlow REST API and writes configuration data to local environment files.
- Sanitization: Validates specific transaction status fields but does not implement comprehensive sanitization for the full JSON payload.
Audit Metadata