active-subscriptions-audit
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill retrieves configuration and documentation from Stripe's official developer portal.
- [PROMPT_INJECTION]: Indirect prompt injection surface identified.
- Ingestion points: External subscription data retrieved via Stripe API (GetSubscriptions call in SKILL.md).
- Boundary markers: None. The skill does not provide specific instructions to the agent to ignore instructions embedded within the subscription data.
- Capability inventory: The skill uses stripe_api_read for data retrieval. It does not possess file-writing or general network exfiltration capabilities.
- Sanitization: The skill lacks explicit sanitization or validation steps for the data processed from the Stripe API.
Audit Metadata