stripe-payment-debugging
Pass
Audited by Gen Agent Trust Hub on Jun 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from Stripe events and Vercel runtime logs, which constitutes an indirect prompt injection surface where malicious log content could attempt to influence the agent.
- Ingestion points: Stripe event data (via stripe-list-events) and Vercel runtime logs (via vercel-get-runtime-logs).
- Boundary markers: Absent. There are no instructions to wrap log data in delimiters or use specific markers to ignore embedded instructions.
- Capability inventory: The agent can synchronize environment variables (sync_stripe_env) and perform various Stripe API read operations.
- Sanitization: Absent. The skill does not provide methods for filtering or escaping the content of ingested logs.
Audit Metadata