stripe-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is primarily educational and focused on security best practices. It includes a dedicated security reference file that instructs users to avoid hardcoding credentials and provides specific migration paths from secret keys to restricted keys to follow the principle of least privilege.- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the official Stripe CLI (
@stripe/cli) via npm for sandbox environment testing. This is a well-known tool provided by a trusted service for developer workflows.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied integration requirements and code for review. It mitigates potential risks by providing explicit instructions on verifying webhook signatures, implementing CSRF protection with state parameters, and setting up Content Security Policies (CSP).
Audit Metadata