skills/payram/payram-mcp/payram-auth/Gen Agent Trust Hub

payram-auth

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a developer guide for API authentication. It describes standard OAuth2/JWT flows and provides usage examples for the PayRam platform.
  • [CREDENTIALS_UNSAFE]: While the skill demonstrates how to handle credentials, it uses clearly marked documentation placeholders (e.g., 'merchant@example.com', 'YourPassword123!', and truncated JWT strings) rather than hardcoded secrets. It properly instructs users to replace these with their own credentials.
  • [EXTERNAL_DOWNLOADS]: The skill references other repositories within the 'payram' GitHub organization. These are legitimate vendor resources related to the project's ecosystem and do not constitute a security risk.
  • [DATA_EXFILTRATION]: All network operations (curl examples) target standard PayRam API endpoints for the purpose of authentication and data retrieval. No unauthorized data exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 03:03 PM
Security Audit — agent-trust-hub — payram-auth