The Agent Skills Directory

[SAFE]: The skill demonstrates secure payment handling by providing patterns that avoid direct contact with raw credit card data, adhering to PCI compliance standards.
[SAFE]: Webhook implementation includes explicit signature verification using stripe.Webhook.construct_event, which is a critical security measure against spoofing attacks.
[SAFE]: All credentials used in code snippets (e.g., sk_test_..., whsec_...) are standard placeholders for development and do not represent hardcoded secrets.
[INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user data such as names and emails by passing them to the Stripe API. There is no evidence of unsafe interpolation into agent instructions or shell commands.

stripe-integration