agent-stripe

Warn

Audited by Snyk on Jul 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe-focused CLI ("agent-stripe") for investigating and interacting with Stripe payment data and accounts. It references payment-specific operations and resources (payment intents, charges, refunds, payouts, balances, connected accounts, subscriptions) and includes commands that investigate or manage refunds and payout-related failures. Stripe is a payment gateway, so this skill provides direct financial execution capability (it can access and act on payment instruments and account operations), even if the doc emphasizes read-first usage.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 15, 2026, 04:25 PM
Issues
1
Security Audit — snyk — agent-stripe