polar
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and code examples for integrating the Polar monetization platform using the official @polar-sh/sdk and @polar-sh/react packages.
- [SAFE]: The skill follows security best practices by recommending the use of environment variables (e.g., process.env.POLAR_ACCESS_TOKEN, process.env.POLAR_WEBHOOK_SECRET) for sensitive API keys and secrets rather than hardcoding them.
- [SAFE]: The code examples for handling webhooks include the use of the validateEvent function to verify the authenticity of incoming requests, preventing spoofing attacks.
- [SAFE]: No obfuscation, unauthorized network operations, or dangerous command execution patterns were detected within the skill files.
Audit Metadata