cardcom-payment-gateway
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed technical documentation for integrating the Cardcom V11 REST API. The content is professional, well-sourced, and consistent with its stated purpose of assisting developers with Israeli payment and invoicing regulations.
- [EXTERNAL_DOWNLOADS]: The skill references external resources including the official Cardcom GitHub organization (
CardCom/OpenFields-FrontEnd-React,CardCom/OpenFields-Backend-Node) and a community Node.js library (@tsdiapi/cardcom). These references are strictly for integration purposes and do not involve piped remote execution or unknown installers. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for processing untrusted data (external API responses). It mitigates this risk by providing a dedicated Python validation script (
scripts/validate_cardcom_response.py) that enforces strict checks on response codes, data types, and transaction amounts, and by explicitly instructing developers to reconcile data server-side before fulfillment.
Audit Metadata