stripe-docs
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to fetch and process external markdown content from Stripe's documentation. While Stripe is a well-known and trusted service, processing content from any external source carries a potential consideration where the agent might encounter unexpected formatting or instructions embedded in the data. This is a standard characteristic of tools that interface with external web content.
- Tool Restriction: The skill utilizes the
allowed-toolsconfiguration to limit execution to thestripe docssubcommand. This implements a least-privilege approach by ensuring the agent can only access documentation and API references rather than executing arbitrary commands.
Audit Metadata