payram-self-hosted-payment-gateway
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to execute a shell script directly from the vendor's domain using bash process substitution (e.g.,
bash <(curl -fsSL https://payram.com/setup_payram.sh)). While this is the vendor's official installation method, it represents a direct execution of remote content. - [EXTERNAL_DOWNLOADS]: Fetches installation resources from the vendor's official website and clones the vendor's MCP server repository from GitHub (github.com/payram/payram-mcp).
- [COMMAND_EXECUTION]: Includes instructions for setting up the server environment, including SSH access, Docker container management, SSL certificate generation via Certbot, and running Node.js development tools using yarn.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes external data including server IP addresses, custom domains, smart contract parameters, and wallet addresses provided during the setup phase.
- Boundary markers: The instructions do not specify the use of delimiters or clear separation to prevent the agent from potentially interpreting embedded instructions within user-provided configuration strings.
- Capability inventory: The skill facilitates shell command execution, filesystem access, and network operations necessary for server deployment and maintenance.
- Sanitization: No validation or escaping mechanisms are described for handling the user-provided inputs used throughout the setup process.
Recommendations
- HIGH: Downloads and executes remote code from: https://payram.com/setup_payram.sh - DO NOT USE without thorough review
Audit Metadata