skills/vm0-ai/vm0-skills/stripe/Gen Agent Trust Hub

stripe

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl commands to perform API operations. These commands correctly reference an environment variable ($STRIPE_TOKEN) for authentication, ensuring that no sensitive credentials are hardcoded within the skill instructions.- [EXTERNAL_DOWNLOADS]: All network operations are directed towards api.stripe.com. This is the official endpoint for Stripe, a well-known and trusted payment processing service.- [SAFE]: The skill instructs the agent to write temporary form-encoded data to /tmp/stripe_request.txt. This is a standard and safe procedure for handling POST request bodies with curl in a local environment. No malicious persistence, obfuscation, or unauthorized data access patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 04:44 PM