The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to install official Stripe tooling and libraries from trusted organizations and well-known services. This includes the Stripe CLI via Homebrew (brew install stripe/stripe-cli/stripe) and standard package managers for Node.js (stripe, @stripe/stripe-js), React Native, Flutter, and Supabase integration (@supabase/stripe-sync-engine).
[COMMAND_EXECUTION]: The instructions utilize the Bash(...) tool pattern to interact with the Stripe CLI for tasks such as reading documentation (stripe docs), managing project environments (stripe projects), and performing financial audits. The skill includes explicit safety instructions requiring the agent to obtain user confirmation before executing any commands that modify data or transfer funds (e.g., stripe pay).
[CREDENTIALS_UNSAFE]: The documentation contains multiple example code snippets that use standard placeholders for API keys and secrets (e.g., sk_test_xxx, pk_test_..., <<YOUR_SECRET_KEY>>, whsec_12345). These are strictly for illustrative purposes. The skill repeatedly warns against hardcoding credentials in source code and mandates the use of secure secret management practices.
[INDIRECT_PROMPT_INJECTION]: The skill defines robust data handling procedures for processing external information from Stripe's API and webhooks. It requires cryptographic signature verification for all incoming webhook events to ensure authenticity and instructs the agent to treat CLI output as the authoritative source of truth, mitigating risks associated with processing potentially malicious or untrusted inputs.

stripe