stripe-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for installing the official vendor package
@paykitjs/stripeusing standard package managers. - [SAFE]: Instructions for secret management (Stripe API keys and webhook secrets) follow best practices by recommending the use of environment variables and
.envfiles rather than hardcoding credentials. - [SAFE]: The use of CLI tools like
npx paykitjsand the officialstripeCLI is consistent with the stated purpose of configuring a development environment. - [SAFE]: No prompt injection, data exfiltration, or obfuscation patterns were detected in the instructions or code snippets.
Audit Metadata