skills/eyadsibai/ltk/stripe-payments/Gen Agent Trust Hub

stripe-payments

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate integration instructions and boilerplate code for Stripe, a well-known payment processing service.
  • [EXTERNAL_DOWNLOADS]: The skill references the official stripe Python library. Stripe is a well-known service, and the use of its official SDK is a standard development practice for payment processing.
  • [CREDENTIALS_UNSAFE]: The code snippets include placeholders for Stripe API keys and webhook secrets (e.g., sk_test_..., pk_test_..., whsec_...). These are recognized as non-functional placeholders used for demonstration and documentation purposes.
  • [INDIRECT_PROMPT_INJECTION]: While the skill defines how to process external webhook data, the implementation includes security best practices such as webhook signature verification using stripe.Webhook.construct_event to ensure the authenticity of incoming data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 06:08 PM