Stripe Connect Account Provisioner

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated Stripe Connect purpose is plausible and the described API/webhook actions fit Stripe usage, but the actual install path is a third-party skill registry unrelated to Stripe while citing Stripe's SDK repo as the source. That mismatch and the transitive skill installation create medium risk even without direct evidence of credential theft or malicious data exfiltration.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:35 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fstripe-connect-account-provisioner%2F@88714aa8b9c6d0d5411043e9f18343dc401b9d56