payment-gateway-integration
Facilitates secure payment processing integration with Stripe, PayPal, and Square, ensuring compliance and error handling.
Install this skill
Security score
The payment-gateway-integration skill was audited on May 12, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 53 | return res.status(400).send(`Webhook Error: ${err.message}`); |
Webhook reference - potential data exfiltration
| 3 | description: Integrates payment processing with Stripe, PayPal, or Square including subscriptions, webhooks, and PCI compliance. Use when implementing checkout flows, recurring billing, or handling re |
Webhook reference - potential data exfiltration
| 43 | ## Webhook Handling |
Webhook reference - potential data exfiltration
| 46 | app.post('/webhooks/stripe', express.raw({ type: 'application/json' }), (req, res) => { |
Webhook reference - potential data exfiltration
| 51 | event = stripe.webhooks.constructEvent(req.body, sig, process.env.STRIPE_WEBHOOK_SECRET); |
Webhook reference - potential data exfiltration
| 53 | return res.status(400).send(`Webhook Error: ${err.message}`); |
Webhook reference - potential data exfiltration
| 74 | - Webhook handling |
Webhook reference - potential data exfiltration
| 81 | - [ ] Verify webhook signatures |
Webhook reference - potential data exfiltration
| 94 | - Verify all webhook signatures |
Webhook reference - potential data exfiltration
| 104 | - Skip webhook signature validation |
Access to .env file
| 14 | const stripe = require('stripe')(process.env.STRIPE_SECRET_KEY); |
Access to .env file
| 51 | event = stripe.webhooks.constructEvent(req.body, sig, process.env.STRIPE_WEBHOOK_SECRET); |