create-payment-credential
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Dependency: The skill requires the
@stripe/link-clipackage. This is a standard dependency for a tool provided by a recognized vendor to manage payment credentials. - Credential Handling: The skill includes functionality to write payment card details to local files. It provides security-conscious guidance to use restricted file permissions and masking to protect this sensitive information.
- Indirect Prompt Injection Surface: The agent is instructed to browse merchant websites and process API responses, which are external and untrusted sources. The skill incorporates explicit defensive instructions to ignore any potential commands embedded in merchant content, treating it strictly as data.
- Dynamic Command Continuation: It utilizes a mechanism where the CLI returns next-action commands. The instructions specify safe execution practices, such as avoiding shell interpretation and using direct process argument passing, to prevent injection vulnerabilities.
Audit Metadata