stripe
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements secret management best practices by using environment variables (
MATON_API_KEY) for authentication instead of hardcoding credentials. - [SAFE]: Network operations are directed solely to the service's official infrastructure (
gateway.maton.ai,ctrl.maton.ai), which is consistent with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Stripe API responses, including user-controlled fields like customer names and product descriptions. This creates a potential surface for indirect prompt injection where malicious instructions could be embedded in the billing data. Ingestion points: Stripe API responses (SKILL.md). Capability inventory: Network access and potential file system access through provided Python/JavaScript execution templates. Boundary markers: Absent. Sanitization: No explicit filtering or sanitization of API response content is defined.
Audit Metadata