swiggy-prava-skill
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
prava-payskill from the author's official GitHub repository (Prava-Payments/prava-skills). - [EXTERNAL_DOWNLOADS]: Instructs the user to install the
@prava-sdk/clipackage from the official NPM registry to handle payment tokenization. - [COMMAND_EXECUTION]: Utilizes the
pravacommand-line interface to create and manage secure payment sessions. - [COMMAND_EXECUTION]: Uses the
codex mcputility to configure and interface with Swiggy-specific Model Context Protocol (MCP) servers for food, grocery, and dining search and cart management. - [DATA_EXFILTRATION]: Implements strong data protection measures by prohibiting the display of sensitive payment data (full tokens, cryptograms) in chat and requiring users to complete authentication challenges like OTPs directly within the browser rather than sharing them with the agent.
Audit Metadata