payram-payouts

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data (wallet addresses, customer IDs, and contact information) to perform sensitive network operations involving financial transactions.
  • Ingestion points: The CreatePayoutRequest payload in SKILL.md accepts external data including toAddress, email, customerID, and residentialAddress.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands within the processed data fields are provided.
  • Capability inventory: The skill facilitates network requests (blockchain payouts) via the payram SDK and direct REST calls using fetch.
  • Sanitization: The documentation includes a validateAddress helper function that uses regular expressions to verify wallet address formats, providing some mitigation against malformed inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:40 PM