payuni-query
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard business logic for payment status verification without any detected malicious patterns, obfuscation, or unauthorized access attempts.
- [CREDENTIALS_UNSAFE]: The provided code correctly implements security best practices by retrieving sensitive configuration, such as
merchantId,hashKey, andhashIV, from environment variables (process.env) rather than hardcoding credentials in the source code. - [DATA_EXFILTRATION]: Network operations are restricted to communication with official PAYUNi API endpoints (
sandbox-api.payuni.com.twandapi.payuni.com.tw) for the purpose of querying transaction data, which is aligned with the skill's primary function.
Audit Metadata