skills/rmsite/skills/stripe-webhooks/Gen Agent Trust Hub

stripe-webhooks

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements and documents Stripe's recommended security model for webhooks, requiring HMAC SHA-256 signature verification for all incoming requests.
  • [SAFE]: External dependencies such as the 'stripe' SDK, 'fastapi', and 'express' are standard libraries fetched from official package registries (npm and PyPI).
  • [SAFE]: CLI installation instructions reference the official Homebrew taps for Stripe and Hookdeck, which are well-known and trusted services.
  • [SAFE]: Credentials and signing secrets are managed using environment variables with clear instructions on avoiding hardcoding, using standard placeholders like 'sk_test_your_api_key_here'.
  • [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized persistence mechanisms was found across the codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 12:15 PM