Security audit
Security checks across malware telemetry and agentic risk
This is a coherent Fundraise Up API guide, but it can lead an agent to perform live donation/payment and donor-access actions without strong built-in confirmation or scoping safeguards.
Review before installing. Use test-mode keys by default, grant the API key only the permissions needed, require explicit human confirmation before any POST or PATCH request, and avoid putting donor PII, payment identifiers, or donor portal links into prompts, logs, or shared outputs unless necessary.
'payment_method_id': payment_method_id,
'supporter': supporter
}
response = requests.post(url, headers=headers, json=data)
response.raise_for_status()
return response.json()# Create donation curl --request POST \ --url 'https://api.fundraiseup.com/v1/donations' \ --header "Accept: application/json" \ --header "Authorization: Bearer $FUNDRAISEUP_API_KEY" \ --header "Content-Type: application/json" \
58/58 vendors flagged this skill as clean.
No suspicious patterns detected.