stripe-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- Official Tooling and Documentation: The skill recommends the use of the Stripe CLI and references external documentation hosted on official Stripe domains.
- Evidence: The skill mentions
npm i -g @stripe/clifor environment setup and referenceshttps://docs.stripe.com/.well-known/skills/metronome/SKILL.mdfor extended functionality. - Context: These resources are official vendor tools and documentation provided to assist with integration development. Using verified vendor resources is a standard and recommended practice for secure development.
- Security Best Practices Guidance: A significant portion of the skill is dedicated to educating users on secure API key management, webhook verification, and Content Security Policy (CSP) implementation.
- Context: By instructing users to avoid hardcoding keys and to use restricted API keys (RAKs), the skill actively promotes a secure posture for developers building on the Stripe platform.
Audit Metadata