paddle-customer-portal
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly instructs developers to perform authentication checks before any database or SDK operations, preventing unauthorized access to billing sessions.
- [SAFE]: It demonstrates safe data handling by resolving customer identifiers server-side from an authenticated session instead of accepting them as client-provided arguments, effectively preventing Insecure Direct Object Reference (IDOR) attacks.
- [SAFE]: Guidance includes the use of environment variables for managing sensitive API keys and secrets, aligning with security best practices for credential management.
- [SAFE]: External links and references target official PaddleHQ documentation and repositories, which are recognized as well-known service providers.
Audit Metadata