web-payments
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for setting up Stripe payments using environment variables for secret management, which is a standard security best practice.
- [EXTERNAL_DOWNLOADS]: Recommends installing official Stripe SDKs (
stripe,@stripe/stripe-js) and tools (stripe-cli) from well-known registries and official repositories. - [SAFE]: Includes a dedicated section on security best practices, emphasizing server-side secret management, webhook signature verification, and idempotency to prevent common vulnerabilities in payment flows.
- [SAFE]: Provides code examples that demonstrate secure implementation patterns, such as verifying webhook signatures before processing events and using integer values for currency to avoid floating-point math errors.
Audit Metadata