The Agent Skills Directory

[SAFE]: The skill provides educational content regarding the Stripe API, including authentication, webhook handling, and development best practices. All API keys (sk_test_xxxx, pk_test_xxxx) and card numbers (4242...) provided in the documentation are standard Stripe placeholders or test-mode data.
[INDIRECT_PROMPT_INJECTION]: The skill documents integration patterns that involve ingesting data from external sources, which creates a potential surface for indirect prompt injection.
Ingestion points: Webhook handler examples in references/webhooks.md process incoming HTTP POST payloads and headers. API response handling in references/development-essentials.md ingests JSON data from the Stripe API.
Boundary markers: The examples correctly demonstrate the use of Stripe's signature verification (stripe.webhooks.constructEvent) to validate the authenticity and integrity of incoming payloads before processing.
Capability inventory: The documented code snippets have the capability to interact with the Stripe API to create charges, transfers, and retrieve account information based on the processed input.
Sanitization: The skill demonstrates best practices by using official Stripe SDKs which handle structured data (JSON) and provide built-in validation mechanisms.

stripe