stripe-subscriptions
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlcommands to fetch markdown content fromhttps://fullstackrecipes.com/api/recipes/. These external resources are used to guide the agent's setup process for environment variables, database connections, logging, and feature flags. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands (
curl) to retrieve remote content. While these specific commands only fetch text, the pattern of fetching and then following remote instructions is a known risk vector. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from an external API and expects the agent to act on it.
- Ingestion points: External markdown files fetched via
curlfromfullstackrecipes.cominSKILL.md. - Boundary markers: None. There are no delimiters or warnings to the agent to treat the fetched content as data rather than instructions.
- Capability inventory: The skill uses
curlfor network access to pull setup recipes. - Sanitization: None. The fetched content is processed directly by the agent.
Audit Metadata