The Agent Skills Directory

External Package Installation: The skill utilizes npm install -g @stripe/link-cli to install the necessary command-line interface. This package is the official tool provided by the vendor for managing Link sessions and financial data. Installing global packages is a standard administrative task for this use case.
Credential Management and Privacy: The instructions provide guidance on using the --auth flag to manage where session credentials are saved. It explicitly directs the agent to never reveal access tokens, refresh tokens, or the contents of authentication files to the user, which is a key security measure for protecting financial access.
Authentication Flow Security: The setup process involves a multi-step authorization flow including polling and verification URLs. The skill includes safeguards against repeated unauthorized attempts and requires explicit user confirmation before proceeding with sensitive financial permissions.
Scope Minimization: The skill maps specific user needs (like payments or financial insights) to the minimum required scopes and source actions, supporting the principle of least privilege by not requesting broader access than necessary.

link-cli