Stripe Connect Integration

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected in the skill instructions or metadata.
  • [EXTERNAL_DOWNLOADS]: The skill references the official Stripe Node.js SDK (stripe@14.x) and provides source links to the official stripe/stripe-node GitHub repository, which is a well-known and trusted service.
  • [COMMAND_EXECUTION]: Provides standard installation commands using npx and clawhub to add the skill from the vendor's own repository (agentskillexchange), which is consistent with the stated author context.
  • [INDIRECT_PROMPT_INJECTION]: The skill mentions processing external data via Stripe webhooks (e.g., account.updated). It mitigates risk by explicitly instructing the use of stripe.webhooks.constructEvent for signature verification to ensure data integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 04:34 AM