stripe-integration
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides architectural guidance and code examples for Stripe integration following industry best practices.
- [SAFE]: Secret management follows best practices by recommending environment variables (STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET) rather than hardcoding credentials.
- [SAFE]: The webhook handler implementation includes mandatory signature verification using stripe.webhooks.constructEvent, which prevents processing of untrusted or tampered data.
- [SAFE]: The skill includes a check to prevent the application from starting in production with a test mode API key, reducing the risk of accidental misconfiguration.
Audit Metadata