metronome
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- Official Documentation References: The skill directs the agent to fetch and read documentation from
docs.metronome.comanddocs.stripe.com. These are official, well-known service domains for the relevant integration partners. - Remote Skill Integration: The
Operational workflowssection links to several specialized sub-skills (e.g., migration, setup, customer creation) hosted under thedocs.metronome.com/.well-known/skills/path. These are treated as trusted extensions of the primary vendor's documentation. - Security-Positive Authorization Guidance: It correctly specifies the use of Bearer tokens for authentication and reminds the agent that tokens determine the environment (sandbox vs. production), emphasizing that user confirmation is required before any API write operations.
- API Interaction Patterns: The instructions cover standard API usage patterns such as idempotency (using
transaction_id), batch ingestion, and provider configuration, which align with best practices for financial and billing integrations.
Audit Metadata