api-commerce-stripe
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard, secure integration patterns for the Stripe API using the official
stripeNode.js library. - [SAFE]: Instructions explicitly warn against exposing secret keys in client-side code and mandate server-side execution for sensitive operations.
- [SAFE]: The skill correctly identifies and mitigates common Stripe integration pitfalls, such as failing to verify webhook signatures or neglecting the use of idempotency keys for mutating requests.
- [SAFE]: Webhook handling patterns utilize raw request bodies for signature verification, preventing signature mismatch issues common with pre-parsed JSON.
- [SAFE]: Error handling patterns are robust, utilizing typed Stripe errors to differentiate between user-fixable card errors and developer-fixable request errors.
Audit Metadata