integrating-stripe-webhooks
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION] (SAFE): The skill contains no instructions designed to bypass safety filters or override agent behavior. The term 'Critical' is used in a benign technical context related to raw body parsing.- [DATA_EXFILTRATION] (SAFE): No hardcoded credentials, sensitive file paths, or unauthorized network operations were detected. Code snippets use variable placeholders like 'webhookSecret' appropriately.- [EXTERNAL_DOWNLOADS] (SAFE): The skill recommends the Stripe CLI for local testing, which is a verified tool from a trusted organization.- [REMOTE_CODE_EXECUTION] (SAFE): No patterns of downloading and executing untrusted code were identified.- [COMMAND_EXECUTION] (SAFE): No dangerous shell commands, privilege escalation (sudo), or persistence mechanisms are present.- [INDIRECT_PROMPT_INJECTION] (SAFE): While the skill involves processing external data (Stripe webhooks), it explicitly teaches the implementation of signature verification (stripe.webhooks.constructEvent) to ensure data authenticity and integrity.
Audit Metadata