paystack-transfer-recipients
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface where untrusted data could influence agent behavior or be passed to external systems.
- Ingestion points: The
POST /transferrecipientandPUT /transferrecipient/:id_or_codeendpoints ingest user-controlled strings includingname,description, andmetadataobjects (as seen in SKILL.md). - Boundary markers: There are no instructions or delimiters defined to isolate these inputs or warn the agent to ignore any potential instructions embedded within the data.
- Capability inventory: The skill utilizes the
paystackRequesthelper to perform network operations, allowing for data to be sent to and modified on the Paystack platform. - Sanitization: The provided documentation and code snippets do not include logic for sanitizing or validating the content of strings before they are interpolated into the API request body.
Audit Metadata