Skip to main content

payment-integration

Facilitates payment integration with SePay and Polar for seamless processing, subscription management, and automated billing solutions.

Install this skill

or
40/100

Security score

The payment-integration skill was audited on Mar 1, 2026 and we found 12 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: Implement payment integrations with SePay (Vietnamese payment gateway with VietQR, bank transfers, cards) and Polar (global SaaS monetization platform with subscriptions, usage-based bill
medium line 17

Webhook reference - potential data exfiltration

SourceSKILL.md
17- Webhook handling (payment notifications)
medium line 47

Webhook reference - potential data exfiltration

SourceSKILL.md
47- **Webhooks**: `references/sepay/webhooks.md` - Setup, payload structure, verification, retry logic
medium line 57

Webhook reference - potential data exfiltration

SourceSKILL.md
57- **Webhooks**: `references/polar/webhooks.md` - Event types, signature verification, monitoring
medium line 63

Webhook reference - potential data exfiltration

SourceSKILL.md
63- **SePay Webhook Verification**: `scripts/sepay-webhook-verify.js` - Verify SePay webhook authenticity
medium line 64

Webhook reference - potential data exfiltration

SourceSKILL.md
64- **Polar Webhook Verification**: `scripts/polar-webhook-verify.js` - Verify Polar webhook signatures
medium line 72

Webhook reference - potential data exfiltration

SourceSKILL.md
723. Load `references/sepay/webhooks.md` for payment notifications
medium line 73

Webhook reference - potential data exfiltration

SourceSKILL.md
734. Use `scripts/sepay-webhook-verify.js` for webhook verification
medium line 80

Webhook reference - potential data exfiltration

SourceSKILL.md
804. Load `references/polar/webhooks.md` for event handling
medium line 81

Webhook reference - potential data exfiltration

SourceSKILL.md
815. Use `scripts/polar-webhook-verify.js` for webhook verification
medium line 89

Webhook reference - potential data exfiltration

SourceSKILL.md
89- Bank account monitoring with webhooks
medium line 113

Webhook reference - potential data exfiltration

SourceSKILL.md
1136. **Configure webhooks** with proper verification
Scanned on Mar 1, 2026
View Security Dashboard