paypal-integration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the PayPal JavaScript SDK from official PayPal domains (www.paypal.com). This is a standard and expected behavior for implementing the PayPal Checkout experience.\n- [COMMAND_EXECUTION]: The skill uses the fetch API in JavaScript and the requests library in Python to perform network operations. These are used to communicate with official PayPal REST API endpoints and verify notification authenticity, which is necessary for the skill's purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing of external data from PayPal notifications, creating an ingestion surface that could be exploited via indirect prompt injection.\n
- Ingestion points: The handle_ipn function in
references/details.mdprocesses POST data from external sources using request.form.\n - Boundary markers: The code samples do not include delimiters or specific instructions to the agent to ignore embedded commands within the ingested payment data.\n
- Capability inventory: The skill has the capability to perform network operations through fetch and requests, and to interact with the backend server via Flask.\n
- Sanitization: While the skill verifies the authenticity of the message with PayPal, it does not explicitly sanitize the content of data fields (like item_name or payer_email) before they are logged or processed.
Audit Metadata