subscription-fullstack
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides patterns for building subscription billing systems. It includes best practices for security such as signature verification for external webhooks using
stripe.webhooks.constructEventto ensure requests originate from Stripe.- [EXTERNAL_DOWNLOADS]: The skill references the officialstripeandexpressNode.js packages, which are well-known and trusted libraries for web development and payment processing.- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The code correctly demonstrates the use of environment variables (e.g.,process.env.STRIPE_SECRET_KEY) for sensitive information.
Audit Metadata