portaly-product
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is professionally authored and focuses on providing secure checkout functionality through Portaly's hosted pages. It follows a clear API contract and provides reliable utility scripts for developers.
- [DATA_EXPOSURE]: Authentication is performed using vendor-issued API keys transmitted securely to official vendor domains (portaly.ai). The skill correctly advises the use of environment variables for secret management and warns against exposing credentials in logs or chat.
- [COMMAND_EXECUTION]: The skill includes local utility scripts (Node.js, Python, Go) for signature verification. These scripts use standard library components and provide clear error handling and validation logic.
- [INDIRECT_PROMPT_INJECTION]: The skill processes product catalog information to assist in storefront development. It provides guidance on handling various price states and includes basic sanitization instructions to manage risks from external data ingestion.
Audit Metadata