paddle-subscription-cancel
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The implementation includes essential security checks, specifically verifying both user authentication and subscription ownership to prevent unauthorized cancellations (Insecure Direct Object Reference protection).
- [SAFE]: Sensitive credentials like API keys and service role keys are managed through server-side environment variables rather than being hardcoded, adhering to security best practices.
- [SAFE]: The documentation provides explicit guidance on avoiding common pitfalls, such as missing authentication checks or leaking internal metadata to the client side.
- [SAFE]: External links and package references are limited to official vendor repositories (PaddleHQ) and established service providers (Supabase).
Audit Metadata