stripe-checkout
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to fetch supplementary configuration files and related skill instructions from the author's GitHub repository (
github.com/Melvynx/ai-maxxing-skills) usingcurl. These resources are hosted on a well-known service and belong to the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted external data in the form of Stripe webhook events. It implements industry-standard security controls by requiring the verification of webhook signatures (
whsec_...) and reading the raw request body before granting any access, which mitigates the risk of processing spoofed or malicious payloads.
Audit Metadata