payment-integration

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/setup_stripe.py uses subprocess.run to call npm install and pip install. This is the intended behavior of a setup script to configure the local environment with necessary libraries.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official libraries from well-known package registries (NPM and PyPI). These dependencies (stripe, @stripe/stripe-js, etc.) originate from a trusted service provider and are standard for payment integrations.
  • [SAFE]: The skill handles sensitive configuration by creating a .env.local.example template, instructing the user to manage secrets securely via environment variables rather than hardcoding them. The documentation also correctly emphasizes webhook signature verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 07:23 AM
Security Audit — agent-trust-hub — payment-integration