billing
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing the user to store sensitive Stripe credentials (API keys and webhook secrets) in environment variables rather than hardcoding them.
- [EXTERNAL_DOWNLOADS]: The skill installs '@convex-dev/stripe' from the NPM registry. This package is part of the vendor's ecosystem and is required for the billing integration.
- [COMMAND_EXECUTION]: The skill uses 'npx convex dev --once' to initialize the development environment and install the required components, which is standard behavior for Convex development tools.
Audit Metadata