skills/agentpmt/agent-skills/stripe-direct-connection/Socket

stripe-direct-connection

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the functional scope matches a Stripe admin tool, but the 'direct connection' branding is misleading because all documented traffic goes through AgentPMT-hosted endpoints and setup is delegated to other skills. Combined with transitive skill installation and autonomous financial actions, this is a high-risk but not confirmed-malicious skill.

Confidence: 88%Severity: 82%

Audit Metadata

Analyzed At

Jul 28, 2026, 07:28 PM

Package URL

pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fstripe-direct-connection%2F@0da6d47796a966b34c696648c055877f3d6b0f340ecb8601126c5076cd73d07e