billing-security
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several scripts designed to interact with development and deployment tools to audit configurations.
scripts/audit-stripe-config.pyutilizessubprocess.runto execute thestripeCLI for verifying webhook status and event delivery.scripts/verify-env-parity.shexecutesvercelandnpx convexto list environment variables and ensure consistency between frontend and backend platforms.scripts/verify-webhook-url.shusescurlto perform status checks on webhook endpoints.- [EXTERNAL_DOWNLOADS]: The diagnostic tools perform necessary network operations to external services as part of their primary function.
scripts/audit-stripe-config.pymakes authenticated requests to the Stripe API to retrieve configuration metadata.scripts/verify-webhook-url.shmakes POST requests viacurlto user-defined webhook URLs to detect 3xx redirects, which are known to cause silent failures in Stripe integrations.
Audit Metadata