stripe-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation providing best practices for Stripe API integrations.
- [SAFE]: Comprehensive security advice is provided in references/security.md, covering restricted API keys (RAKs), secret management, webhook signature verification, and CSRF protection.
- [SAFE]: The documentation actively warns against anti-patterns such as hardcoding API keys or using deprecated, less secure legacy APIs.
- [SAFE]: No executable code, shell scripts, or external dependencies are included in the skill.
- [SAFE]: All external links point to official Stripe documentation and support domains (docs.stripe.com, dashboard.stripe.com, support.stripe.com).
Audit Metadata