stripe

SUSPICIOUS. The skill’s overall purpose and capabilities fit Stripe integration, and data flows largely match the stated task. However, it requires an additional sync package beyond the official Stripe SDK, and the provided evidence does not verify that this package is operated by Replit despite the skill presenting it as part of the native integration flow. That mismatch, plus unpinned dependency installation, makes the skill moderately risky rather than benign.