portaly-payment
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to assist developers with Portaly Payment API integration and does not contain malicious code or instructions.
- [CREDENTIALS_SAFE]: The instructions include strong security guidance, such as warning the user never to paste secrets into chat and recommending the use of environment variables and
.gitignorefor secret management. - [EXTERNAL_DOWNLOADS]: The skill documents a version reporting feature that communicates with the vendor's official domain (
portaly.ai). This is a standard practice for managing skill updates and does not involve the transfer of sensitive user information. - [COMMAND_EXECUTION]: Utility scripts are provided to verify HMAC signatures in various programming environments (Node.js, Python, and Go). These are intended for local development verification of the payment integration's security logic and do not execute untrusted remote code.
Audit Metadata