payment-status-sync
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill details robust patterns for handling asynchronous payment events. It correctly identifies race conditions inherent in webhook-driven systems and provides architectural solutions such as timestamp-guarded database updates.
- [SAFE]: The provided code samples demonstrate a 'security-by-design' approach by including admin role checks for sensitive reconciliation endpoints and rate limiting for user-facing synchronization features.
- [SAFE]: All external interactions are restricted to the official Stripe API, a well-known and trusted service. No evidence of data exfiltration, prompt injection, or obfuscation was found during the analysis.
Audit Metadata