perfex-payment-gateway
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional templates for Perfex CRM payment gateway development without malicious intent.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found. The skill correctly instructs developers to use the
encryptedflag in the settings array and thedecryptSetting()method for handling sensitive data. - [INDIRECT_PROMPT_INJECTION]: While the skill provides templates for handling external webhook data, it includes defensive patterns such as HMAC signature verification using
hash_equalsto ensure the authenticity of incoming requests. - [OBFUSCATION]: No hidden characters, Base64 encoding of commands, or homoglyph attacks were detected in the instructions or code samples.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation for Perfex CRM and Stripe but does not perform or instruct any unverified remote code downloads.
Audit Metadata