stripe-stack-skill
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion point for external data via Stripe webhook handlers in templates/webhook-handler-nextjs.ts and workflows/add-webhook-handler.md. While processing external HTTP request bodies introduces an attack surface, the skill implements robust security controls.
- Ingestion points: The POST route in src/app/api/stripe/webhook/route.ts consumes the raw request body.
- Boundary markers: The code explicitly mandates using stripe.webhooks.constructEvent with a STRIPE_WEBHOOK_SECRET to verify the payload signature before any processing occurs.
- Capability inventory: The handlers have the ability to perform database writes (upserting subscription status) and reset usage limits through the Supabase service role client.
- Sanitization: Cryptographic signature verification effectively sanitizes and authenticates the source of the data.
- [EXTERNAL_DOWNLOADS]: The skill refers users to a private repository github.com/ScientiaCapital/stripe-stack for additional resources. This is a documented vendor-controlled repository and is presented as a legitimate extension of the skill's functionality.
Audit Metadata