skills/stripe/ai/stripe-directory/Gen Agent Trust Hub

stripe-directory

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Remote Code Execution via Vendor Script: The skill includes a command to download and execute an installation script from cli.stripe.com. While piping remote scripts to a shell is a pattern that warrants review, in this context, it is the documented method for installing the vendor's official command-line interface (CLI).
  • Command Line Interaction: The skill uses the stripe CLI to search a directory of services. This involves executing local commands to interact with the vendor's API to resolve business domains and engagement paths.
  • Vendor-Specific Integration: All external references, including the installation URL and the directory search commands, point to the official infrastructure of the skill's author. This is consistent with the skill's stated purpose of providing a discovery and engagement layer for that vendor's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 08:09 AM