stripe-checkout

SUSPICIOUS: the Stripe workflow itself is coherent and proportionate, but the skill relies on runtime fetching of unpinned remote instructions from a personal GitHub repo and explicitly chains into other skills. That weak install trust and transitive trust make it riskier than a self-contained benign Stripe guide, though there is no clear evidence of credential exfiltration or malicious data routing.