Stripe Connect Integration
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected in the skill instructions or metadata.
- [EXTERNAL_DOWNLOADS]: The skill references the official Stripe Node.js SDK (
stripe@14.x) and provides source links to the officialstripe/stripe-nodeGitHub repository, which is a well-known and trusted service. - [COMMAND_EXECUTION]: Provides standard installation commands using
npxandclawhubto add the skill from the vendor's own repository (agentskillexchange), which is consistent with the stated author context. - [INDIRECT_PROMPT_INJECTION]: The skill mentions processing external data via Stripe webhooks (e.g.,
account.updated). It mitigates risk by explicitly instructing the use ofstripe.webhooks.constructEventfor signature verification to ensure data integrity.
Audit Metadata