stripe
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The file
tests/test_stripe_cli.pyutilizessubprocess.runto execute the localscripts/stripe-clitool for verification purposes. This is a standard testing pattern that uses a controlled list of arguments to exercise the skill's own code and does not represent an arbitrary command injection vulnerability. - [EXTERNAL_DOWNLOADS]: The skill connects to the well-known and trusted Stripe API (
api.stripe.com) to retrieve account balances, payment intents, and subscription data. These network operations are intrinsic to the skill's stated purpose and target a reputable service provider.
Audit Metadata