wompi
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of a comprehensive set of documentation and code templates for integrating Wompi payments. Analysis of the instructions and code snippets reveals no malicious intent, obfuscation, or unauthorized operations.
- [CREDENTIALS_UNSAFE]: The skill provides detailed guidance on securing API keys. It explicitly warns against hardcoding private keys or integrity secrets in client-side code and provides a production checklist to ensure secrets are managed via environment variables and excluded from version control.
- [EXTERNAL_DOWNLOADS]: Code samples interact exclusively with official Wompi endpoints at wompi.co (both sandbox and production). These network operations are strictly limited to payment processing, configuration retrieval, and status polling as required for the integration.
- [COMMAND_EXECUTION]: The documentation suggests standard development commands such as using git for installation and ngrok or localtunnel for testing webhooks locally. These are informational for the user and are not executed by the skill automatically.
Audit Metadata