blindpay
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- SAFE (SAFE): The skill is composed of 27 markdown files providing documentation and technical guides. No malicious scripts, obfuscated code, or unauthorized commands were identified during analysis.\n- CREDENTIALS_UNSAFE (SAFE): Authentication keys, API tokens, and private keys are consistently represented by placeholders (e.g., 'YOUR_API_KEY', ''). The documentation includes explicit warnings to store credentials securely and avoid committing them to version control.\n- EXTERNAL_DOWNLOADS (SAFE): The skill references standard, industry-recognized Node.js packages ('express' and 'ethers') for integration examples. No suspicious or unverified third-party dependencies were found.\n- DATA_EXFILTRATION (SAFE): All network operations described in the integration guides are directed to official service endpoints (api.blindpay.com). There is no evidence of data being sent to untrusted or non-whitelisted domains.\n- REMOTE_CODE_EXECUTION (SAFE): The skill does not contain any remote code execution patterns. All shell snippets are standard API requests (curl) and all JavaScript snippets are templates for local development.
Audit Metadata