Skip to main content

stripemeter

Integrates Stripe for usage-based billing, ensuring accurate event handling and reconciliation for effective pricing strategies.

Install this skill

or
71/100

Security score

The stripemeter skill was audited on Mar 3, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 37

Curl to non-GitHub URL

SourceSKILL.md
37curl -X POST http://localhost:3000/v1/events/ingest \
medium line 53

Curl to non-GitHub URL

SourceSKILL.md
53curl -X POST http://localhost:3000/v1/usage/projection \
medium line 206

Curl to non-GitHub URL

SourceSKILL.md
206curl http://localhost:3000/metrics | grep ingest
medium line 218

Curl to non-GitHub URL

SourceSKILL.md
218curl -X POST http://localhost:3000/v1/replay \
low line 14

Access to .env file

SourceSKILL.md
14cp .env.example .env && docker compose up -d && pnpm -r build
low line 114

Access to .env file

SourceSKILL.md
114liveKey: process.env.STRIPE_SECRET_KEY,
low line 115

Access to .env file

SourceSKILL.md
115testKey: process.env.STRIPE_TEST_SECRET_KEY
low line 37

External URL reference

SourceSKILL.md
37curl -X POST http://localhost:3000/v1/events/ingest \
low line 53

External URL reference

SourceSKILL.md
53curl -X POST http://localhost:3000/v1/usage/projection \
low line 70

External URL reference

SourceSKILL.md
70apiUrl: 'http://localhost:3000',
low line 94

External URL reference

SourceSKILL.md
94api_url="http://localhost:3000",
low line 206

External URL reference

SourceSKILL.md
206curl http://localhost:3000/metrics | grep ingest
low line 218

External URL reference

SourceSKILL.md
218curl -X POST http://localhost:3000/v1/replay \
Scanned on Mar 3, 2026
View Security Dashboard