stripe-integration
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a template for Stripe integrations, including checkout, subscriptions, and customer management.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known software libraries including the 'stripe' Python SDK and 'flask' for web server functionality. These are standard dependencies for the described functionality.
- [CREDENTIALS_UNSAFE]: The code snippets follow security best practices by recommending the use of environment variables (e.g.,
os.environ["STRIPE_SECRET_KEY"]) rather than hardcoding credentials. - [COMMAND_EXECUTION]: Code examples are provided for common backend tasks. There are no instances of arbitrary shell execution or dangerous command construction. Webhook processing includes signature verification using
stripe.Webhook.construct_event, which is the recommended method for preventing spoofing attacks. - [DATA_EXFILTRATION]: No evidence of unauthorized data transfer was found. All network operations are directed at the official Stripe API or legitimate placeholder domains for user-specified endpoints.
Audit Metadata