Stripe Webhook Signature Verifier

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated webhook-verification purpose is legitimate and the described Stripe/Datadog flows are broadly coherent, but the provenance is inconsistent. The skill presents itself as Stripe-based while installation actually pulls a third-party skill repo through a transitive installer, so trust in the delivered instructions/code does not match the claimed source.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:36 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fstripe-webhook-signature-verifier%2F@1ceec3366b1ec5e6bd2d91933b34251992c6b6f7