billing-security

Pass

Audited by Gen Agent Trust Hub on Mar 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes several scripts designed to interact with development and deployment tools to audit configurations.
  • scripts/audit-stripe-config.py utilizes subprocess.run to execute the stripe CLI for verifying webhook status and event delivery.
  • scripts/verify-env-parity.sh executes vercel and npx convex to list environment variables and ensure consistency between frontend and backend platforms.
  • scripts/verify-webhook-url.sh uses curl to perform status checks on webhook endpoints.
  • [EXTERNAL_DOWNLOADS]: The diagnostic tools perform necessary network operations to external services as part of their primary function.
  • scripts/audit-stripe-config.py makes authenticated requests to the Stripe API to retrieve configuration metadata.
  • scripts/verify-webhook-url.sh makes POST requests via curl to user-defined webhook URLs to detect 3xx redirects, which are known to cause silent failures in Stripe integrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 2, 2026, 08:50 PM