stripe-link-cli
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents a CLI (
stripe-link-cli) for requesting payment credentials, virtual cards, and shared payment tokens via Stripe Link, and executing payments using the Machine Payment Protocol (MPP) or retrieving card credentials for checkouts. This constitutes a direct financial operation (purchases/transfers/settlement execution). Independent access control is documented via the authentication mechanism (link-cli auth login, session files, and API authentication/verification URLs) and approval flows (requiring user approval through the Link mobile app or auth status checks) as specified in SKILL.md:58-91 and SKILL.md:19.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata