skills/immamdouhaboammar/antigravity-superpowers/agency-payments-billing-engineer/Gen Agent Trust Hub
agency-payments-billing-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure instructions for payment systems engineering. It correctly identifies and mitigates common risks such as double-charging, raw card data handling, and webhook security. The implementation uses environment variables for secrets and utilizes official SDK methods for integrity checks.\n- [PROMPT_INJECTION]: The skill defines a process for ingesting external data via webhooks. The design incorporates industry-standard security measures to mitigate risks associated with untrusted data ingestion.\n
- Ingestion points: The handleStripeWebhook function in SKILL.md processes raw data from incoming network requests.\n
- Boundary markers: The skill implements signature verification using the official stripe.webhooks.constructEvent method to ensure source authenticity.\n
- Capability inventory: The documented flows include database updates and order fulfillment logic.\n
- Sanitization: Payload integrity is ensured through cryptographic verification; the logic is designed to process structured data fields.
Audit Metadata