convex-billing
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@convex-dev/stripepackage from the npm registry. This is a standard dependency for the functionality described. - [COMMAND_EXECUTION]: The skill uses
npm installandnpx convex devto set up the environment and deploy functions. These are standard development commands for the Convex platform. - [DATA_EXPOSURE]: The skill correctly advises storing sensitive Stripe API keys and webhook secrets in environment variables (
STRIPE_SECRET_KEY,STRIPE_WEBHOOK_SECRET) rather than hardcoding them in the source code.
Audit Metadata