Security audit
Stripe Webhook Replay Lab
Security checks across malware telemetry and agentic risk
Overview
The skill appears to do its stated webhook replay job, but it uses a Stripe webhook signing secret and sends repeated signed POST requests to the URL you provide, so keep it to local or staging targets.
This looks like a straightforward local/staging Stripe webhook replay helper. Before installing or running it, verify the target URL, use a test webhook secret where possible, avoid production unless you intend to exercise real business logic, and keep replay counts controlled.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.