convex-billing

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install @convex-dev/stripe via npm. This is a vendor-owned package associated with the 'get-convex' ecosystem and is used for its intended purpose of Stripe integration.
  • [CREDENTIALS_UNSAFE]: The documentation mentions STRIPE_SECRET_KEY and STRIPE_WEBHOOK_SECRET. It correctly advises the user to store these sensitive credentials in the Convex environment rather than hardcoding them, which is a standard security best practice for secret management.
  • [COMMAND_EXECUTION]: The workflow involves running standard development commands such as npm install and npx convex dev. These are expected operations for setting up and deploying a Convex project and do not exhibit malicious intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 03:14 PM
Security Audit — agent-trust-hub — convex-billing