Stripe CLI
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the Stripe CLI from Stripe's official Homebrew repository (
stripe/stripe-cli/stripe). - [COMMAND_EXECUTION]: The skill uses various shell commands to interact with the Stripe API, including
stripe listen,stripe trigger, and resource listing commands likestripe customers list. These are standard operational commands for the intended purpose of the tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes data ingested from the Stripe API, such as API logs and customer lists, which creates a surface where external, untrusted content could influence the agent's behavior.
- Ingestion points: Data is ingested via
stripe logs tail,stripe customers list, andstripe payments listas described inSKILL.md. - Boundary markers: None are present in the provided instructions to distinguish between command output and potentially malicious data embedded within Stripe resources.
- Capability inventory: The skill uses CLI commands to read and list Stripe resource data.
- Sanitization: No specific sanitization or filtering of the Stripe API output is mentioned in the instructions.
Audit Metadata