stripe-directory

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the discovery/search portion is coherent and mostly benign, but the skill expands into agent-mediated purchasing with extra payment CLIs, credential forwarding, and real-world financial actions. Official Stripe provenance reduces malware likelihood, yet the optional buy flow is broader and riskier than a normal directory-search skill.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Aug 11, 2026, 06:22 PM
Package URL
pkg:socket/skills-sh/stripe%2Fai%2Fstripe-directory%2F@ccd641e5f483cd1a4f38db80247a43605a7bc17202d1b6d0b712a8c58e38379e
Security Audit — socket — stripe-directory