stripe-integration
Fail
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's stated purpose—Stripe payment processing with checkout, subscriptions, webhooks, and related customer management—is coherent with the provided implementation patterns and examples. The data flows align with Stripe's official APIs, and webhook handling demonstrates proper security practices. The primary concern is the inclusion of hard-coded test secrets in code samples, which could lead to credential leakage if copied into production. This risk is mitigated by ensuring secrets are sourced from secure storage and never embedded in code. Overall, the footprint is proportionate to the declared purpose (benign but with notable credential-handling caveats in examples).
Confidence: 98%
Audit Metadata