stripe-integration
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructional content for Stripe integration using the official Stripe Python library and standard Flask patterns.
- [SAFE]: Webhook implementation includes mandatory signature verification using
stripe.Webhook.construct_event, which is the primary defense against spoofed webhook data. - [SAFE]: The skill uses non-sensitive placeholders (e.g.,
sk_test_...,whsec_...) for API keys and endpoint secrets, preventing the exposure of real credentials. - [SAFE]: No suspicious network operations, obfuscation, or unauthorized file access patterns were detected. The code snippets focus strictly on the stated purpose of payment processing.
Audit Metadata