stripe
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The test suite (tests/test_stripe_cli.py) utilizes subprocess.run to verify the functionality of the bundled stripe-cli script. This is an internal testing mechanism and does not pose a threat to the execution environment.
- [EXTERNAL_DOWNLOADS]: The skill connects to api.stripe.com to retrieve balance and subscription information. This targets a well-known service and is necessary for the skill's stated purpose.
- [DATA_EXFILTRATION]: The skill interacts with sensitive financial data. It contains explicit instructions for the agent to minimize data exposure in the chat interface and requires the use of environment variables for API key management, following security best practices.
- [PROMPT_INJECTION]: The skill possesses a potential indirect prompt injection surface by processing data from an external API. 1. Ingestion points: The skill ingests data from the Stripe API through the scripts/stripe-cli tool. 2. Boundary markers: Instructions explicitly mandate summarizing findings and avoiding raw payloads to maintain context boundaries. 3. Capability inventory: The skill is capable of performing authorized HTTPS requests to read data and cancel subscriptions. 4. Sanitization: The stripe-cli script filters API responses through specific summarization functions to ensure only relevant data is processed.
Audit Metadata