purchasely-review
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs security-focused audits on the local codebase, specifically searching for and flagging hardcoded API keys (
PLY_API_KEY) to encourage secure configuration management. - [SAFE]: External dependencies and documentation references are strictly limited to official Purchasely resources and well-known package registries (NPM, CocoaPods, Maven, Pub), ensuring that all external components are within the vendor's trusted ecosystem.
- [SAFE]: The skill includes a verification step that uses local build and test commands to confirm that suggested integration fixes are functional. This is a standard capability for automated code-review agents and is executed within the context of the developer's environment.
- [SAFE]: Use of local reference files (e.g.,
../../references/) allows the skill to operate with high-fidelity, vendor-curated information without requiring excessive external network access during the audit phase.
Audit Metadata