stripe

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill acts as a technical reference for Stripe services, including PaymentIntents, Connect, Billing, and other products. It contains only documentation and standard code samples.
  • [EXTERNAL_DOWNLOADS]: The skill provides installation commands for Stripe SDKs and the Stripe CLI from official registries (NPM, PyPI, RubyGems) and Stripe's own package repository (packages.stripe.dev). These are well-known and official sources for the software described.
  • [COMMAND_EXECUTION]: The documentation includes curl and stripe CLI examples. These are provided for educational purposes to demonstrate API interactions and are standard for developer tools.
  • [PRIVILEGE_ESCALATION]: Installation instructions for the Stripe CLI on Linux systems use sudo to configure the system package manager. This is standard and expected behavior for installing system-level developer tools.
  • [CREDENTIALS_UNSAFE]: The documentation uses generic placeholders for API keys (e.g., sk_test_..., pk_test_...) and includes explicit warnings against hardcoding secret keys or exposing them to clients. No real credentials or secrets were found in the skill contents.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 01:50 AM
Security Audit — agent-trust-hub — stripe