payram-bitcoin-payments
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references configuration and setup guides located in the official PayRam GitHub organization (
github.com/payram/payram-mcp). These are vendor-controlled resources necessary for the skill's functionality. - [CREDENTIALS_UNSAFE]: Code integration snippets use appropriate placeholders (e.g.,
PAYRAM_API_KEY) for authentication. No hardcoded secrets or credentials were found in the documentation. - [PROMPT_INJECTION]: The skill contains purely instructional content for developers and does not include any commands or prompts designed to override agent behavior or safety filters.
- [DATA_EXFILTRATION]: The described architecture is designed to prevent sensitive data exposure by keeping private keys on a separate mobile device and using only extended public keys (xpub) on the server for address generation.
Audit Metadata