stripe-subscription
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a software template from a third-party GitHub repository (
https://github.com/Eng0AI/stripe-subscription.git). The source is not associated with a verified or trusted organization. - [COMMAND_EXECUTION]: The setup process requires executing multiple shell commands, including
git clone,npm install, and deployment commands via the Vercel and Netlify CLI tools (vercel --prod,netlify deploy). - [DATA_EXPOSURE_AND_EXFILTRATION]: The instructions involve setting sensitive Stripe API keys (
STRIPE_SECRET_KEY). However, it follows security best practices by using environment variables (.env) and secure CLI tools for credential management (vercel env add) rather than hardcoding secrets.
Audit Metadata