blindpay

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • SAFE (SAFE): The skill is composed of 27 markdown files providing documentation and technical guides. No malicious scripts, obfuscated code, or unauthorized commands were identified during analysis.\n- CREDENTIALS_UNSAFE (SAFE): Authentication keys, API tokens, and private keys are consistently represented by placeholders (e.g., 'YOUR_API_KEY', ''). The documentation includes explicit warnings to store credentials securely and avoid committing them to version control.\n- EXTERNAL_DOWNLOADS (SAFE): The skill references standard, industry-recognized Node.js packages ('express' and 'ethers') for integration examples. No suspicious or unverified third-party dependencies were found.\n- DATA_EXFILTRATION (SAFE): All network operations described in the integration guides are directed to official service endpoints (api.blindpay.com). There is no evidence of data being sent to untrusted or non-whitelisted domains.\n- REMOTE_CODE_EXECUTION (SAFE): The skill does not contain any remote code execution patterns. All shell snippets are standard API requests (curl) and all JavaScript snippets are templates for local development.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:32 PM