The Agent Skills Directory

[SAFE]: The skill implements standard PayPal integration patterns using official API endpoints and secure credential management practices. The code examples demonstrate appropriate error handling and recommend using secret managers for sensitive tokens.
[INDIRECT_PROMPT_INJECTION]: The skill processes Instant Payment Notification (IPN) data from external webhooks, which constitutes an untrusted data ingestion surface. * Ingestion points: The handle_ipn route in SKILL.md processes raw POST data from the /ipn endpoint via request.get_data(). * Boundary markers: Absent; there are no specific delimiters used to isolate the external payload from the agent's instructions. * Capability inventory: The skill does not perform dangerous operations like shell command execution (subprocess), dynamic code evaluation (eval), or direct file system writes based on the processed data. * Sanitization: Absent; the logic relies on PayPal's verification service (_notify-validate) to ensure the source is authentic before processing fields.

paypal-integration