stripe-directory

Warn

Audited by Socket on Nov 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s provider-discovery purpose and Stripe CLI use are broadly aligned. The official CLI installer reduces concern about the download source, but its unpinned execution and the unverified Directory plugin provenance leave meaningful supply-chain risk. Payment and provisioning instructions include user approval safeguards.

Confidence: 82%Severity: 70%
Audit Metadata
Analyzed At
Nov 13, 2026, 11:35 AM
Package URL
pkg:socket/skills-sh/stripe%2Fai%2Fstripe-directory%2F@a64242e024503505e569b80213eba0edb21622f74a1e8ec24b198a919b5e325d