monetization
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code for integrating Stripe payments and subscriptions using standard practices. No malicious code or hidden backdoors were detected.
- [SAFE]: Sensitive data management follows best practices by instructing users to store Stripe Secret Keys and Webhook Secrets in environment variables (
os.environ) rather than hardcoding them. - [SAFE]: The webhook implementation (
stripe_webhook) correctly includes signature verification using thestripe.Webhook.construct_eventmethod, which mitigates risks associated with processing untrusted external data. - [SAFE]: All dependencies (
stripe,fastapi) are well-known, legitimate packages from established registries.
Audit Metadata