webhook-implementation
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance for building Stripe webhooks. It correctly identifies security requirements such as signature verification using
stripe.webhooks.constructEventand the importance of using raw request bodies to prevent tampering. - [COMMAND_EXECUTION]: No suspicious command execution was found. References to the Stripe CLI (
stripe listen,stripe trigger) are standard development practices for testing webhooks locally. - [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found. The skill correctly references the use of a secret for verification without providing a literal one.
Audit Metadata