ecommerce-payment-processing
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality educational and implementation guide for payment systems. It explicitly advocates for security best practices such as client-side tokenization to minimize PCI DSS scope, ensuring that sensitive card data never reaches the merchant's server.
- [SAFE]: Code snippets provided for Stripe and other gateways use environment variables for secret management and implement robust webhook signature verification to prevent spoofing attacks.
- [SAFE]: The architecture designs include necessary reliability features like idempotency keys for payment operations and dunning processes for recurring billing failures.
- [SAFE]: All external references and service descriptions target well-known, trusted providers including Stripe, PayPal, Adyen, Google, and Apple.
Audit Metadata