stripe-webhooks
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured information and code templates to assist users in understanding and handling Stripe webhook events.- [SAFE]: Recommends standard security practices, including webhook signature verification and idempotency logic to prevent duplicate processing.- [SAFE]: Correctly utilizes environment variable placeholders for sensitive configuration like the webhook secret instead of hardcoding values.- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for processing external data from user-provided Stripe webhook payloads.
- Ingestion points: User-pasted Stripe webhook JSON payloads in the analysis prompt.
- Boundary markers: None explicitly defined to isolate payload content from agent instructions.
- Capability inventory: None. The skill does not possess any execution capabilities or tool access; it only generates analysis text and implementation code snippets for the user.
- Sanitization: None described for the LLM's processing of the input data.
Audit Metadata