paypal-integration
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official PayPal JavaScript SDK via
https://www.paypal.com/sdk/jsand interacts with official PayPal API endpoints (api-m.paypal.com,api-m.sandbox.paypal.com). These are well-known, trusted services. - [CREDENTIALS_UNSAFE]: Code snippets use clearly defined placeholders for sensitive information, such as
YOUR_CLIENT_ID,YOUR_CLIENT_SECRET, andSANDBOX_SECRET. No actual secrets or API keys are hardcoded in the skill. - [COMMAND_EXECUTION]: No dangerous system commands, subprocess spawning, or shell executions are present in the provided scripts.
- [PROMPT_INJECTION]: The instructions are task-oriented and do not contain patterns intended to bypass AI safety filters or override system instructions.
- [REMOTE_CODE_EXECUTION]: The skill uses standard HTTP requests to official APIs and loads the official PayPal client-side SDK. No untrusted remote code execution patterns were detected.
Audit Metadata