stripe-apps
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- Official Documentation and Tooling: The skill extensively references official product documentation and utilizes the standard command-line interface for the platform. These are expected resources for the development workflow.
- Secure Credential Management: It encourages the use of a built-in secure storage API for managing sensitive tokens and API keys, which is a recommended security practice for maintaining data integrity.
- Safe Authentication Patterns: The instructions detail the use of signed requests to verify communication between the user interface and back-end services, alongside the implementation of scoped access keys.
- Sandboxed Environment: The skill highlights the constraints of the extension environment, such as the use of a sandboxed iframe and a restricted SDK client, which limits the potential for unauthorized data access or execution.
Audit Metadata