payments-weapon
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides defensive programming templates and architecture guides that prioritize security, such as HMAC-SHA256 signature verification and the 'never trust the client' principle.
- [COMMAND_EXECUTION]: Contains a helper bash script (
scripts/replay-webhook-locally.sh) that utilizes the official Stripe CLI to replay events for local debugging and development purposes. - [EXTERNAL_DOWNLOADS]: Documents the use of official Stripe SDKs and provides instructions for downloading the Stripe CLI from trusted sources like Homebrew or Stripe's official documentation.
- [PROMPT_INJECTION]: Defines strict 'Hard Rules' and directives that focus on integration correctness and security, effectively providing a safety framework for the agent rather than attempting to override platform safeguards.
Audit Metadata