paystack-dedicated-accounts

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill documentation describes functions that ingest user-provided data (email, names, phone numbers) which are then used in network API requests.\n
  • Ingestion points: Parameters such as email, first_name, last_name, and phone in the POST /dedicated_account/assign and POST /dedicated_account endpoints within SKILL.md.\n
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the documentation snippets.\n
  • Capability inventory: The skill utilizes network capabilities via the paystackRequest helper to communicate with Paystack's infrastructure.\n
  • Sanitization: The provided code examples do not explicitly demonstrate sanitization or validation of the input strings before they are sent to the API.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:44 AM