payment-integration
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/setup_stripe.pyusessubprocess.runto callnpm installandpip install. This is the intended behavior of a setup script to configure the local environment with necessary libraries. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official libraries from well-known package registries (NPM and PyPI). These dependencies (
stripe,@stripe/stripe-js, etc.) originate from a trusted service provider and are standard for payment integrations. - [SAFE]: The skill handles sensitive configuration by creating a
.env.local.exampletemplate, instructing the user to manage secrets securely via environment variables rather than hardcoding them. The documentation also correctly emphasizes webhook signature verification.
Audit Metadata