Stripe Connect Account Provisioner
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated Stripe Connect purpose is plausible and the described API/webhook actions fit Stripe usage, but the actual install path is a third-party skill registry unrelated to Stripe while citing Stripe's SDK repo as the source. That mismatch and the transitive skill installation create medium risk even without direct evidence of credential theft or malicious data exfiltration.
Confidence: 84%Severity: 62%
Audit Metadata