stripe-integration

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill instructions or metadata.
  • [EXTERNAL_DOWNLOADS]: The skill identifies typescript and stripe as required dependencies. These are well-known, legitimate libraries for implementing payment functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data by generating code based on user requests.
  • Ingestion points: User-provided integration requests (SKILL.md).
  • Boundary markers: None explicitly defined in the prompt structure.
  • Capability inventory: The skill itself contains no scripts, command execution, or network operations.
  • Sanitization: The guidelines explicitly instruct the agent to "Always validate inputs before processing," which serves as a defensive best practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:38 PM