sales-paddle
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidance for Paddle API integration with a strong focus on security. It includes explicit instructions and code examples for verifying HMAC-SHA256 signatures on incoming webhooks to prevent spoofing and unauthorized data injection.
- [SAFE]: Encourages the use of sandbox environments (sandbox-api.paddle.com) and separate API keys for development, which aligns with best practices for credential management.
- [SAFE]: All external references and URLs point to official Paddle documentation or their public GitHub organization (PaddleHQ), which are recognized as well-known and legitimate service providers.
- [SAFE]: Code examples provided use standard libraries (e.g., Python's
requests,hmac,hashlib) for routine API interactions and do not contain any hidden or dynamic execution patterns.
Audit Metadata