stripe-payments
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate integration instructions and boilerplate code for Stripe, a well-known payment processing service.
- [EXTERNAL_DOWNLOADS]: The skill references the official
stripePython library. Stripe is a well-known service, and the use of its official SDK is a standard development practice for payment processing. - [CREDENTIALS_UNSAFE]: The code snippets include placeholders for Stripe API keys and webhook secrets (e.g.,
sk_test_...,pk_test_...,whsec_...). These are recognized as non-functional placeholders used for demonstration and documentation purposes. - [INDIRECT_PROMPT_INJECTION]: While the skill defines how to process external webhook data, the implementation includes security best practices such as webhook signature verification using
stripe.Webhook.construct_eventto ensure the authenticity of incoming data.
Audit Metadata