The Agent Skills Directory

[Financial Data Access]: The skill facilitates access to transaction history, balances, and account details through the link-cli tool. It implements a least-privilege approach by instructing the agent to use specific 'source actions' (like read_balances or read_link_transactions) and only retrieve the data necessary for the user's specific query.
[External Package Management]: The skill references the @stripe/link-cli package, which is managed via the standard Node.js package manager (npm/npx). This allows the agent to ensure the latest version of the vendor's official command-line interface is available for use.
[Authentication and Security Controls]: There are strong built-in guardrails for authentication. The skill requires checking the user's authorization status before any data retrieval and uses auth upgrade to request specific permissions only when needed. This ensures that the agent cannot access financial data without explicit user consent through the vendor's secure flow.
[Indirect Prompt Injection Surface]: Like any skill that processes external data, it may encounter untrusted content within transaction descriptions or merchant names. The skill mitigates this by instructing the agent to summarize information clearly, avoid raw data dumps, and never expose sensitive identifiers or credentials in its output.

financial-insights