adding-stripe
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Stripe SDKs (
stripe,@stripe/stripe-js) from the public npm registry. These are well-known, legitimate packages required for the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for handling external data such as webhook events and customer information. It mitigates potential injection risks by explicitly instructing the implementation of signature verification using
stripe.webhooks.constructEventto ensure the authenticity of incoming payloads.
Audit Metadata