skills/agentskillexchange/skills/Stripe Connect Marketplace Sync/Socket

Stripe Connect Marketplace Sync

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the business purpose is coherent for Stripe Connect, but the trust chain is not. The main risk is that a Stripe-branded skill is installed from an unverified third-party skill publisher, creating transitive trust and possible credential exposure for a financial integration.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Mar 29, 2026, 04:36 AM

Package URL

pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fstripe-connect-marketplace-sync%2F@264f22045a07ba9fa06bb88f8c453f1477a4226b