Skills
Navigate
skills/paddlehq/paddle-agent-skills/paddle-sandbox-testing/Gen Agent Trust Hub

paddle-sandbox-testing

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill involves the agent reading and processing data from external sources, such as Paddle's webhook simulator and notification logs.
  • Ingestion points: External data is retrieved via client.simulations.runsEvents.list and client.notifications.logs.list in SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the ingested data.
  • Capability inventory: The agent is granted capabilities to modify checkout settings and replay notifications based on processed data.
  • Sanitization: No sanitization or validation logic is provided for the external payloads.
  • [DYNAMIC_EXECUTION]: The skill provides JavaScript code templates to be executed dynamically via a Paddle MCP server.
  • Evidence: Code snippets in SKILL.md demonstrate the use of an execute tool to perform multi-step API workflows.
  • [COMMAND_EXECUTION]: The skill provides instructions for installing and using hookdeck to tunnel local webhook traffic.
  • Evidence: Commands such as brew install hookdeck and hookdeck listen are documented in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 01:47 PM