stripe-docs
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
stripeCLI tool to perform operations such as searching documentation, reading specific pages, and looking up API references. - [EXTERNAL_DOWNLOADS]: The documentation provides links to official Stripe domains for the purpose of installing or upgrading the Stripe CLI tool.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process external documentation content, which introduces a data ingestion surface.
- Ingestion points: Documentation content is retrieved from official documentation via the
stripe docscommand. - Boundary markers: The instructions do not include specific delimiters or warnings for the agent to isolate the fetched documentation from its core instructions.
- Capability inventory: The skill's capabilities are restricted to executing the
stripeCLI for documentation access and authentication. - Sanitization: The skill fetches content directly from a well-known service provider.
Audit Metadata