skills/stripe/ai/stripe-directory/Gen Agent Trust Hub

stripe-directory

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Stripe Directory Integration: The skill uses the stripe directory search command to locate vendors and partners. This leverages official directory data to fulfill user requests for market research and discovery.
  • Use of Official Developer Tools: It instructs the agent to install and manage @stripe/link-cli through npm. This is a standard installation method for a trusted utility provided by the author to handle secure, shared payment tokens.
  • Machine Payment Protocol (MPP) Implementation: The skill outlines a workflow for programmatic service consumption via the Machine Payment Protocol. This involves standard network operations like using curl to check for payment challenges and specialized payers like Link CLI to process transactions.
  • Transaction Guardrails: A key safety feature is the explicit instruction for the agent to display the price and obtain user confirmation before any financial transaction occurs, ensuring transparency and human-in-the-loop control.
  • Tooling Scope and Configuration: The skill instructions include the use of tools such as npm, curl, and link-cli, which facilitate the described payment and discovery workflows. These actions are consistent with the functional requirements of integrating with modern financial and developer services.
  • Dynamic Integration Commands: The skill references using integration commands provided by search results (e.g., stripe projects add) to streamline setup. These follow established patterns within the official CLI ecosystem for vendor onboarding.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 06:21 PM
Security Audit — agent-trust-hub — stripe-directory