The Agent Skills Directory

[Command Execution]: The skill utilizes the stripe CLI to perform business operations. These interactions are scoped to specific subcommands (pay, directory, whoami) via the platform's allowed-tools configuration, which limits the potential attack surface.
[Financial Transaction Guardrails]: The skill instructions define clear safety protocols for financial operations. It mandates that the agent must never execute a transfer without explicit user consent, must show the exact command before execution, and should utilize review flags like --agent or --json to allow the user to inspect transfer details first.
[Credential Safety]: The instructions explicitly prohibit the printing of full API keys to the user, following best practices for sensitive data handling.
[Trusted Resource Usage]: All external references, including documentation and dashboard links, point to official Stripe domains (stripe.com, dashboard.stripe.com). These are recognized vendor resources and are appropriate for the skill's intended functionality.

stripe-pay