Security audit
Stripe Production Engineering
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only Stripe engineering skill whose payment and credential examples are disclosed and aligned with its purpose.
Reasonable to install as Stripe engineering documentation. Treat generated Stripe code as financially sensitive: test in Stripe test mode first, use restricted keys, keep live secrets out of prompts unless necessary, and review any billing, subscription, refund, tax, or Connect payout changes before deploying.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
50/50 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.