stripe-integration-expert
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates security best practices for payment integrations.
- [CREDENTIALS_SAFE]: Securely manages secrets by referencing environment variables (e.g.,
STRIPE_SECRET_KEY,STRIPE_WEBHOOK_SECRET) rather than hardcoding credentials. - [COMMAND_EXECUTION]: Includes documentation for using the official Stripe CLI for local development and testing, which is a standard and safe development practice.
- [DATA_EXFILTRATION]: Webhook handling uses official signature verification (
stripe.webhooks.constructEvent) to ensure data integrity and prevent unauthorized event spoofing. - [PERSISTENCE]: Implements idempotency checks using a database table to prevent duplicate processing of webhook events, which is a reliability and security best practice.
Audit Metadata