sales-square-online
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration guidance for Square Online, a legitimate e-commerce platform. It utilizes official Square API domains (connect.squareup.com) and references the official Square MCP server (square-mcp-server).
- [EXTERNAL_DOWNLOADS]: The skill references official tools and libraries including the Square SDKs and the Square MCP server. These are sourced from well-known registries and official vendor repositories, which are considered safe for the context of this developer tool.
- [COMMAND_EXECUTION]: Instructions provide example commands for using official Square CLI tools (npx square-mcp-server) and the platform's own skill management system (npx skills add). These commands are standard for setting up the described development environment.
- [CREDENTIALS_UNSAFE]: The skill scan found no hardcoded secrets; it correctly instructs users to manage sensitive credentials like access tokens through environment variables.
- [SAFE]: No obfuscation, persistence mechanisms, or malicious injection patterns were found. The skill includes a capability to record new information to a local file (references/learnings.md) for knowledge accumulation.
Audit Metadata