Stripe Projects CLI
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
stripeCLI tool for tasks like initialization and credential syncing. These are standard operations for the official Stripe service. - [SAFE]: All referenced resources, including documentation, point to official Stripe domains. The functionality to sync credentials into
.envfiles and the use of automation flags like--auto-confirmalign with standard development practices for this tool. - [INDIRECT_PROMPT_INJECTION]: The skill has a minimal attack surface for indirect prompt injection. 1. Ingestion points: Untrusted data could enter via project names or configuration parameters provided to the agent for Stripe commands. 2. Boundary markers: None present. 3. Capability inventory: Executes shell commands via the
stripeCLI and writes to local.envfiles. 4. Sanitization: No explicit sanitization of inputs is mentioned in the skill instructions. The risk is considered safe given the specific scope of the CLI tool.
Audit Metadata