stripe-one-time-payment
Warn
Audited by Snyk on Sep 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an unverified third-party GitHub repository (
https://github.com/Eng0AI/stripe-one-time-payment.git) to set up and execute the application code, introducing an unknown operational dependency with weak provenance.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation explicitly incorporates Stripe Checkout integration for processing one-time payments and managing payment credentials (
STRIPE_SECRET_KEY,STRIPE_PUBLISHABLE_KEY), which constitutes a specific payment gateway capability.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata