stripe
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill focuses on secure integration patterns and industry-standard best practices.
- [EXTERNAL_DOWNLOADS]: Recommends official and well-known packages including
@stripe/mcp(via NPM), the officialstripePython library (via PyPI), andstripe-agent-toolkit. These are standard tools for the stated purpose and do not escalate risk. - [COMMAND_EXECUTION]: Includes standard setup commands for adding MCP servers (
npx -y @stripe/mcp) which are legitimate for establishing the Stripe integration environment. - [DATA_EXFILTRATION]: Explicitly prohibits storing sensitive PCI data (card numbers, CVV) in local databases and mandates the use of environment variables for secret management, reducing the risk of accidental data exposure.
Audit Metadata