plaid-fintech
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Plaid API integration. The provided code examples (Node.js/React) demonstrate standard implementation flows for link tokens, transaction synchronization, identity verification, and ACH transfers.
- [EXTERNAL_DOWNLOADS]: The skill references several industry-standard libraries required for its functionality, including 'plaid', 'jsonwebtoken', 'jwks-rsa', and 'react-plaid-link'. These are well-known dependencies for fintech and authentication workflows.
- [CREDENTIALS_UNSAFE]: The skill explicitly instructs against hardcoding credentials, demonstrating the use of environment variables (e.g.,
process.env.PLAID_SECRET) and providing logic for encrypting access tokens at rest. It also includes validation checks to warn the agent if it detects unsafe credential management in user code. - [COMMAND_EXECUTION]: No dangerous shell commands, subprocess spawning, or unauthorized execution patterns were found. The logic is restricted to API interactions and database operations using an ORM pattern.
Audit Metadata