payram-crypto-payments
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides tools such as
assess_payram_projectthat scan local codebase files, creating a surface where untrusted data (like malicious instructions hidden in code or comments) could be ingested into the agent's context.\n - Ingestion points: Local project files scanned by
assess_payram_projectas described in SKILL.md.\n - Boundary markers: None identified in the documentation to delimit project content from agent instructions.\n
- Capability inventory: The skill provides capabilities for generating code snippets via
generate_payment_sdk_snippetand scaffolding full applications viascaffold_payram_app.\n - Sanitization: No explicit sanitization or validation of the scanned project content is mentioned.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone the MCP server repository from the vendor's GitHub repository at
https://github.com/payram/payram-mcp. This is a standard procedure for utilizing the vendor's provided tooling.\n- [COMMAND_EXECUTION]: The documentation provides instructions to execute shell commands for cloning the repository and installing dependencies usinggit cloneandyarn install. These commands target the vendor's own infrastructure and are part of the intended setup process.
Audit Metadata