stripe-directory
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Code Execution via Vendor Script: The skill includes a command to download and execute an installation script from
cli.stripe.com. While piping remote scripts to a shell is a pattern that warrants review, in this context, it is the documented method for installing the vendor's official command-line interface (CLI). - Command Line Interaction: The skill uses the
stripeCLI to search a directory of services. This involves executing local commands to interact with the vendor's API to resolve business domains and engagement paths. - Vendor-Specific Integration: All external references, including the installation URL and the directory search commands, point to the official infrastructure of the skill's author. This is consistent with the skill's stated purpose of providing a discovery and engagement layer for that vendor's ecosystem.
Audit Metadata