clerk-billing
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the integration of Clerk Billing services through documented patterns for Next.js applications.
- [SAFE]: Sensitive information, such as API keys and webhook secrets, is managed using environment variables (e.g., NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY, CLERK_SECRET_KEY, CLERK_WEBHOOK_SIGNING_SECRET) rather than hardcoded values.
- [SAFE]: Webhook implementations specifically include signature verification using the @clerk/nextjs/webhooks helper, preventing unauthorized event processing.
- [SAFE]: All external documentation and dashboard links point to trusted domains (clerk.com and dashboard.clerk.com).
- [SAFE]: Tool permissions (WebFetch) are appropriately scoped for interacting with the Clerk Platform API to manage billing configurations and features.
Audit Metadata