convex-billing

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @convex-dev/stripe package from the npm registry. This is a standard dependency for the functionality described.
  • [COMMAND_EXECUTION]: The skill uses npm install and npx convex dev to set up the environment and deploy functions. These are standard development commands for the Convex platform.
  • [DATA_EXPOSURE]: The skill correctly advises storing sensitive Stripe API keys and webhook secrets in environment variables (STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET) rather than hardcoding them in the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 01:02 AM