stripe-connect
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security practices by using official Stripe SDK methods to verify webhook signatures (
stripe.webhooks.constructEventandstripe.parseEventNotification), which protects the application from processing spoofed external data. - [SAFE]: Sensitive credentials such as API keys and webhook secrets are managed through environment variables (
process.env.STRIPE_SECRET_KEY,process.env.STRIPE_WEBHOOK_SECRET) rather than being hardcoded in the source code. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the standard
stripelibrary from the official NPM registry, which is a well-known and trusted service for payment processing.
Audit Metadata