payram-payouts
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data (wallet addresses, customer IDs, and contact information) to perform sensitive network operations involving financial transactions.
- Ingestion points: The
CreatePayoutRequestpayload inSKILL.mdaccepts external data includingtoAddress,email,customerID, andresidentialAddress. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the processed data fields are provided.
- Capability inventory: The skill facilitates network requests (blockchain payouts) via the
payramSDK and direct REST calls usingfetch. - Sanitization: The documentation includes a
validateAddresshelper function that uses regular expressions to verify wallet address formats, providing some mitigation against malformed inputs.
Audit Metadata