The Agent Skills Directory

[SAFE]: Secret management follows industry best practices by retrieving API keys and webhook secrets from Laravel's configuration system rather than hardcoding them within the code logic.
[SAFE]: Network activity is restricted to the official Stripe API domain (api.stripe.com), which is a well-known and trusted service provider.
[INDIRECT_PROMPT_INJECTION]: The skill includes code that processes JSON responses from external APIs. While this represents a data ingestion surface where external content enters the application context, the implementation uses Data Transfer Objects (DTOs) for structural validation, and there is no evidence of the data being used to influence agent behavior or execute dynamic commands.

laravel-services