The Agent Skills Directory

[SAFE]: No security threats detected. The skill provides production-grade integration patterns for Stripe payments. The instructions correctly emphasize that secret keys should remain server-side and that all webhooks must be verified using the official SDK's constructEvent method to prevent fraudulent payment signals.
[EXTERNAL_DOWNLOADS]: The skill references official Stripe libraries (stripe, @stripe/stripe-js, @stripe/react-stripe-js) from a well-known service provider. These are standard dependencies for the stated purpose.
[CREDENTIALS_UNSAFE]: The skill includes an environment variable template with placeholders like sk_test_... and whsec_.... These are non-functional examples used for instructional purposes and do not constitute a credential leak.

stripe-expert