payments
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows industry security standards for payment processing. It explicitly instructs the agent to avoid hardcoding credentials and provides patterns for secure secret management using environment variables.
- [SAFE]: Webhook implementation includes mandatory signature verification using the official Stripe library, which is the primary defense against payload tampering and spoofing attacks.
- [EXTERNAL_DOWNLOADS]: The skill references the official 'stripe' Python package and 'stripe-cli'. These are well-known, legitimate tools provided by the payment service vendor for integration purposes.
- [RELIABILITY]: The inclusion of idempotency keys in checkout sessions and an event tracking table for webhooks demonstrates high-quality engineering that prevents financial inconsistencies or duplicate data processing.
Audit Metadata