financial-insights

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFE
Full Analysis
  • Official Tooling and Dependencies: The skill utilizes the @stripe/link-cli package and associated CLI commands. This is a standard integration for interacting with the service's API and originates from an established provider.
  • Read-Only Data Access: The implementation is strictly limited to data retrieval. It includes explicit guardrails to prevent sensitive actions such as moving money, initiating payments, or modifying account settings.
  • Authentication and Least Privilege: The skill mandates authentication before any data retrieval and instructs the agent to request only the specific 'source actions' required for the immediate task, following the security principle of least privilege.
  • Processing External Data: The skill handles financial data (like transaction descriptions) which are provided by external institutions. While processing external content always carries a minor theoretical risk of indirect prompt injection, the skill's focus on structured JSON parsing and summary generation serves as a practical safeguard.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 08:53 PM