stripe-integration
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and technical resource for implementing Stripe payments using official libraries and established integration patterns.
- [DATA_EXFILTRATION]: Network communication is exclusively directed toward official Stripe API endpoints for legitimate operations such as creating checkout sessions and managing customers.
- [CREDENTIALS_UNSAFE]: The skill correctly avoids hardcoding real secrets, instead using standard placeholders like 'sk_test_...' for API keys and 'whsec_...' for webhook secrets.
- [PROMPT_INJECTION]: The webhook implementation includes a mandatory security layer using 'stripe.Webhook.construct_event' to verify the Stripe-Signature header, effectively preventing the processing of unauthenticated or malicious external payloads.
Audit Metadata