paddle-subscription-update
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a technical guide for implementing subscription updates using the official Paddle SDK for Node.js. It does not contain any malicious code, obfuscation, or unauthorized data access patterns.- [SAFE]: The provided Next.js Server Action example follows security best practices by implementing mandatory authentication checks and verifying subscription ownership against a database before performing any operations via the Paddle API. This prevents Insecure Direct Object Reference (IDOR) vulnerabilities.- [SAFE]: The documentation includes a dedicated section on common pitfalls that explicitly warns developers about security risks like missing authentication or ownership checks, promoting secure coding practices.- [SAFE]: Sensitive configuration data, such as API keys and service role keys, are handled via environment variables, which is the standard safe practice for secret management in web applications.
Audit Metadata