stripe-generated-app-scaffold
Pass
Audited by Gen Agent Trust Hub on Jun 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a custom command-line interface tool to perform environment synchronization and webhook configuration.
- Evidence: The instructions reference the use of
cofounder runfollowed by specific tools likesync_stripe_envandadd_stripe_webhookto manage application state and Stripe integration. - [PROMPT_INJECTION]: The skill operates by interpreting user requests to generate application scaffolds, which presents a surface for indirect prompt injection.
- Ingestion points: User requests for specific application features (e.g., pricing pages, checkout routes) serve as the primary input for the scaffolding logic in
SKILL.md. - Boundary markers: There are no explicit delimiters defined to separate user-provided task descriptions from the system instructions.
- Capability inventory: The skill has the capability to modify environment variables and register external webhooks via the
cofounderCLI tool. - Sanitization: While no explicit sanitization routines are described, the skill contains multiple prescriptive rules and 'traps to avoid' specifically designed to prevent the accidental exposure of secrets or insecure coding practices.
Audit Metadata