prava-sdk-integration
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and template resource for integrating the Prava payment platform into web applications. No malicious patterns or behaviors were detected.
- [SAFE]: External network operations are restricted to the official vendor domain,
https://api.prava.space, for API interactions and health checks. - [SAFE]: The skill utilizes the
@prava-sdk/coreNPM package, which is the official SDK provided by the author (Prava Payments). Use of this package is consistent with the skill's stated purpose. - [SAFE]: The documentation includes explicit security warnings regarding the handling of sensitive credentials, specifically mandating that the
MERCHANT_SECRET_KEYremains strictly server-side.
Audit Metadata