polar-billing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes a billing system that processes untrusted data from external sources, creating a surface for indirect prompt injection.
- Ingestion points: Stripe Webhook Endpoints defined in
server/polar/integrations/stripe/endpoints.py(/v1/integrations/stripe/webhook and /v1/integrations/stripe/webhook-connect). - Boundary markers: The documentation explicitly mentions a signature verification step ("Verify signature") for webhooks, which serves as a security boundary.
- Capability inventory: The system manages financial transactions, subscription lifecycles, and provisions external benefits such as GitHub repository access and Discord roles.
- Sanitization: The workflow includes signature verification and asynchronous processing via workers to isolate and validate external event data.
- Ingestion points: Stripe Webhook Endpoints defined in
Audit Metadata