stripe-payment-tracker
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Potential surface for indirect prompt injection.\n
- Ingestion points: Fetches and processes external content from payment notification emails in Gmail (Step 3).\n
- Boundary markers: Relies on Gmail search filters (
from:notifications@stripe.com) to limit the data scope, but lacks specific delimiters or instructions to ignore embedded commands within the email body content.\n - Capability inventory: Utilizes capabilities to write to Google Sheets and search Stripe records via the Zapier MCP server toolset.\n
- Sanitization: Performs basic numeric and string sanitization on extracted payment data.\n- [EXTERNAL_DOWNLOADS]: Integration with external services via Zapier.\n
- The skill depends on the Zapier MCP server for core functionality, including Gmail, Stripe, and Google Sheets access.\n
- Mentions the official setup domain (https://mcp.zapier.com/) for user configuration.
Audit Metadata