kryptogo-pay-webhook

Fail

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: CRITICAL
Full Analysis
  • [SAFE]: The skill implements standard payment webhook handling logic. The provided code examples in references/code-examples.md demonstrate best practices such as status verification, idempotency checks, and proper HTTP response signaling.
  • [EXTERNAL_DOWNLOADS]: The documentation in references/troubleshooting.md suggests installing ngrok, a well-known and trusted service used to expose local development servers to the internet for testing webhooks. This is a standard industry practice for the described use case.
  • [SAFE]: An example URL (https://abc123.ngrok.io/api/payment/callback) was flagged by automated scans as potentially malicious. However, technical analysis confirms this is a generic placeholder string used exclusively for documentation and demonstration purposes within the troubleshooting guide, posing no risk to the user or agent.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 16, 2026, 11:50 AM
Security Audit — agent-trust-hub — kryptogo-pay-webhook