paddle-customer-portal
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure coding practices by emphasizing that authentication must occur before any database or SDK operations in the provided Server Action code.
- [SAFE]: It correctly implements an ownership check by resolving the Paddle
customer_idserver-side from the user's authenticated email, preventing an attacker from requesting access to portals belonging to other users. - [SAFE]: The skill warns against common security pitfalls such as trusting client-side input for sensitive identifiers and leaking internal session metadata to the frontend.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized exfiltration attempts were detected in the instructions or example code.
Audit Metadata