lovable-checkout
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by providing explicit warnings against placing secret keys in client-side environment variables or files accessible to the browser.
- [EXTERNAL_DOWNLOADS]: Fetches development dependencies from the official npm registry and well-known services (Stripe). These references are consistent with the skill's stated purpose of providing a checkout integration.
- [COMMAND_EXECUTION]: Includes standard development commands for package installation and Supabase project management. These are provided as instructional snippets for the user to execute manually.
Audit Metadata