stripe
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a technical reference for Stripe services, including PaymentIntents, Connect, Billing, and other products. It contains only documentation and standard code samples.
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands for Stripe SDKs and the Stripe CLI from official registries (NPM, PyPI, RubyGems) and Stripe's own package repository (
packages.stripe.dev). These are well-known and official sources for the software described. - [COMMAND_EXECUTION]: The documentation includes
curlandstripeCLI examples. These are provided for educational purposes to demonstrate API interactions and are standard for developer tools. - [PRIVILEGE_ESCALATION]: Installation instructions for the Stripe CLI on Linux systems use
sudoto configure the system package manager. This is standard and expected behavior for installing system-level developer tools. - [CREDENTIALS_UNSAFE]: The documentation uses generic placeholders for API keys (e.g.,
sk_test_...,pk_test_...) and includes explicit warnings against hardcoding secret keys or exposing them to clients. No real credentials or secrets were found in the skill contents.
Audit Metadata