Stripe Webhook Signature Verifier
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated webhook-verification purpose is legitimate and the described Stripe/Datadog flows are broadly coherent, but the provenance is inconsistent. The skill presents itself as Stripe-based while installation actually pulls a third-party skill repo through a transitive installer, so trust in the delivered instructions/code does not match the claimed source.
Confidence: 86%Severity: 74%
Audit Metadata