stripe-integration-expert
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security controls for payment processing, including mandatory webhook signature verification using the official Stripe SDK in both the README examples and the implementation in SKILL.md.
- [SAFE]: Secret management is handled correctly by advising users to read API keys from environment variables and explicitly forbidding hardcoded credentials or exposure in client-side code.
- [SAFE]: Employs idempotency patterns using database checks and specific Stripe headers to prevent duplicate transactions and handle network retries safely.
- [EXTERNAL_DOWNLOADS]: References the official stripe library and Stripe CLI, which are well-known resources provided by a trusted payment service provider.
Audit Metadata