checkout-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with official vendor resources and libraries. It uses the
dodopaymentsanddodopayments-checkoutpackages and directs traffic to verified vendor domains underdodopayments.com. - [SAFE]: The documentation emphasizes critical security practices for payment processing. It explicitly warns developers not to grant access based on browser redirect parameters (
return_url) and instead mandates verification through signed webhooks. - [SAFE]: Provided code examples demonstrate secure implementation patterns. They include server-side mapping of public plan identifiers to internal product IDs, strict type checking of request bodies, and validation that quantities are positive integers before calling the payment API.
- [SAFE]: The skill follows secret management best practices by instructing the use of environment variables for API keys and ensuring that sensitive credentials remain strictly on the server side, never exposing them to the client-side browser environment.
Audit Metadata