agentpay
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
agentpay-clipackage from the npm registry and interacts with theagent-pay.shdomain to manage payment workflows. - [COMMAND_EXECUTION]: The instructions include shell commands for installing software via npm and interacting with the payment API using curl for initialization and card creation.
- [DATA_EXFILTRATION]: The skill manages sensitive API credentials and virtual card data (PAN, CVV, expiry). It documentation specifies that the CLI stores these credentials locally in the
~/.agentpay/config.jsonfile. The network operations are directed to the vendor's own infrastructure atagent-pay.shfor the intended purpose of the skill.
Audit Metadata