Stripe Connect Integration
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The stated Stripe Connect purpose is coherent, and the described capabilities fit that purpose. The main security concern is transitive installation from a third-party skill repository via the skills CLI; without reviewing the installed skill contents, trust remains only moderate. Overall this is better classified as suspicious-to-medium risk supply-chain exposure, not malware.
Confidence: 80%Severity: 52%
Audit Metadata