stripe-integration
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileThe skill idea is coherent with its stated purpose: it focuses on Stripe-based payments infrastructure, including webhooks, idempotency, and lifecycle events, with explicit security-conscious patterns (webhook verification, metadata, separate test/live keys). The requirements (supabase-backend) and anti-patterns (verify signatures, use webhooks, avoid trusting API responses) align with a production-grade Stripe integration. There are potential gaps to watch for in secret management, explicit data handling policies, and ensuring no unintended data flows or credential exposure through misconfiguration. Overall, the footprint is proportionate to a Stripe-centric payments integration guide and implementation scaffold.