stripe-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill incorporates comprehensive instructions to protect sensitive information, specifically prohibiting the transmission of Stripe secret keys and customer Personally Identifiable Information (PII) to external destinations.
- [EXTERNAL_DOWNLOADS]: Fetches components from the official Stripe infrastructure, including the @stripe/mcp package and Stripe CLI, which are hosted by the official service provider.
- [COMMAND_EXECUTION]: Provides standard instructions for environment setup and tool installation using well-known package managers (npm, brew) to facilitate the intended MCP integration.
- [CREDENTIALS_UNSAFE]: Explicitly discourages the hardcoding of secrets, instead advocating for the use of environment variables and properly configured .env files to prevent credential exposure in version control or logs.
- [PROMPT_INJECTION]: Includes specific guardrails designed to resist social engineering and adversarial instructions that might attempt to bypass safety filters or security protocols.
Audit Metadata