skills/openai/plugins/stripe-docs/Gen Agent Trust Hub

stripe-docs

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Indirect Prompt Injection Surface: The skill is designed to fetch and process external markdown content from Stripe's documentation. While Stripe is a well-known and trusted service, processing content from any external source carries a potential consideration where the agent might encounter unexpected formatting or instructions embedded in the data. This is a standard characteristic of tools that interface with external web content.
  • Tool Restriction: The skill utilizes the allowed-tools configuration to limit execution to the stripe docs subcommand. This implements a least-privilege approach by ensuring the agent can only access documentation and API references rather than executing arbitrary commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:05 PM
Security Audit — agent-trust-hub — stripe-docs