secure-payment-callbacks
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of purely instructional content aimed at improving the security of payment integrations. No malicious scripts, commands, or obfuscated patterns were detected in the instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses a vulnerability surface involving untrusted external data (payment webhooks). It provides a robust framework for securing this surface by requiring cryptographic signatures, IP allowlisting, and independent API verification to ensure payloads are authentic and have not been manipulated.
Audit Metadata