testing-and-go-live
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: Code examples demonstrate the secure practice of using environment variables (e.g.,
process.env.DODO_PAYMENTS_API_KEY) to manage secrets. The guide also explicitly warns users to rotate or revoke keys that may have been accidentally committed to version control. - [EXTERNAL_DOWNLOADS]: The instructions reference the official
dodopayments-cliand SDKs. These are vendor-owned resources relevant to the skill's purpose. - [COMMAND_EXECUTION]: The skill documents the use of the
dodopayments-clifor local webhook testing (dodo wh listen,dodo wh trigger). These commands are standard developer utilities for the platform and are used within a testing context.
Audit Metadata