payments-stripe
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements industry-standard security practices for payment processing by utilizing official SDKs and verifying transaction sources.
- [SAFE]: It correctly utilizes webhook signature verification with the raw request body to prevent spoofing of billing events.
- [SAFE]: Idempotency is handled by checking and marking event IDs to prevent duplicate processing of financial transactions.
- [SAFE]: Sensitive credentials like API keys and webhook secrets are accessed via environment variables rather than being hardcoded, adhering to secret management best practices.
Audit Metadata