upgrade-sumup
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's instructions strictly follow legitimate software maintenance tasks using official SumUp documentation and release notes. It includes security-positive advice such as verifying payment states, implementing idempotency, and validating webhook signatures.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data including dependency manifests, lockfiles, and API specifications. While this represents a theoretical attack surface for indirect prompt injection, the risk is negligible as the instructions target trusted vendor-controlled domains (developer.sumup.com) and the user's own project environment.
Audit Metadata