upgrade-stripe
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFE
Full Analysis
- Official Vendor Resources: The skill references official Stripe domains (stripe.com) and repositories for documentation, changelogs, and SDK management. These are legitimate resources provided by the vendor.
- Standard Package Management: Instructions include installing official packages like
@stripe/stripe-jsvia npm and thestripepackage via pip. These are standard practices for developers integrating with Stripe services. - Safe Credential Handling: The code examples use
sk_test_xxxas a placeholder for secret keys, which is a recognized safe practice for documentation to avoid accidental exposure of real credentials. - Secure Script Loading: The guide describes loading Stripe.js via a script tag from the official
js.stripe.comdomain, which is the recommended and secure method for including the library in web applications.
Audit Metadata