stripe-payment-tracker

SUSPICIOUS. The skill's capabilities mostly match its bookkeeping purpose, but its data flow is unusually dependent on Zapier as a mandatory intermediary for email, payment, and spreadsheet operations. Because sensitive Gmail and Stripe data are routed through a third-party MCP service—sometimes silently on fallback—the main risk is medium privacy/data-flow exposure rather than confirmed malware.