convex-billing
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
@convex-dev/stripevia npm. This is a vendor-owned package associated with the 'get-convex' ecosystem and is used for its intended purpose of Stripe integration. - [CREDENTIALS_UNSAFE]: The documentation mentions
STRIPE_SECRET_KEYandSTRIPE_WEBHOOK_SECRET. It correctly advises the user to store these sensitive credentials in the Convex environment rather than hardcoding them, which is a standard security best practice for secret management. - [COMMAND_EXECUTION]: The workflow involves running standard development commands such as
npm installandnpx convex dev. These are expected operations for setting up and deploying a Convex project and do not exhibit malicious intent.
Audit Metadata