agent-stripe
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security model that prioritizes data protection by redacting sensitive Stripe fields (secrets, PII, URLs) by default in all outputs.
- [SAFE]: Instructions explicitly forbid the agent from requesting or accepting raw API keys in chat, instead directing users to use local OS dialogs via the
--formflag to maintain credential isolation. - [SAFE]: The toolset follows a 'read-first' design, emphasizing investigation over modification, and requires explicit user opt-in via the
--exposeflag to reveal redacted metadata. - [SAFE]: Authentication metadata and non-secret configurations are stored in standard system paths (Keychain, XDG config), adhering to best practices for local secret management.
Audit Metadata