kryptogo-pay
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for users to run
npx create-kg-express-testandnpm install @kryptogo/kryptogokit-sdk-react. These commands download and execute/install packages from the public npm registry. These resources appear to be official tools provided by the vendor (KryptoGO) for the purpose described in the skill. - [CREDENTIALS_UNSAFE]: The documentation mentions the use of sensitive environment variables such as
KRYPTOGO_STUDIO_API_KEY. It follows security best practices by explicitly instructing the user to keep these keys in a.envfile, exclude them from version control via.gitignore, and ensure they are only used in backend environments to prevent exposure.
Audit Metadata