digital-products
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements industry-standard security practices for digital asset delivery, specifically using AWS S3 presigned URLs with a 60-second expiration to prevent unauthorized sharing of links.
- [SAFE]: Database operations for license key management utilize atomic transactions (db.$transaction) to prevent race conditions and ensure license keys are not double-assigned during concurrent purchase events.
- [EXTERNAL_DOWNLOADS]: The implementation patterns utilize official, well-known libraries from the AWS SDK (@aws-sdk/client-s3 and @aws-sdk/s3-request-presigner) for secure cloud storage interactions. These are trusted, well-maintained packages.
- [SAFE]: The post-purchase provisioning logic is designed to be idempotent, using upsert operations to safely handle duplicate webhook notifications from payment providers.
Audit Metadata