nicepay-devguide
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
launch-devguide.cjsuses thenode:child_process.spawnmethod to execute the bundled MCP server logic contained invendor/nicepay-devguide-mcp/dist/cli.bundle.js. This is the standard operational procedure for skills generated via themcp-to-skillutility to run their internal logic. - [SAFE]: The documentation files (
vendor/.../data/manual/) contain several examples of authentication headers and API keys (e.g.,S2_af4543a0be4d49a98122e01ec2059a56). These are identified as dummy sandbox credentials provided by NICEPAY in their official manuals for developer testing and do not pose a security risk to production environments. - [SAFE]: All external URLs and repository references point to official NICEPAY domains (
nicepay.co.kr) or the vendor's official GitHub organization (nicepayments), which are established and trusted sources for the documentation provided by the skill.
Audit Metadata