Stripe Full Read Access

• Outcome: Review
• Latest audit: May 29, 2026 at 9:29 PM UTC
• Version:
  1.0.0

Overview

This Stripe skill is framed as read-only but appears to allow account-changing Stripe actions when asked.

Review this carefully before installing. Use a narrowly scoped read-only Stripe restricted key if possible, do not provide a full secret key unless you intend to allow financial changes, and require explicit confirmation before any refund, payout, transfer, subscription, customer, or account mutation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

Medium

• Confidence: 94% confidence
• Finding: The skill is presented as a read-only Stripe access skill, but its safety guidance explicitly allows write operations whenever a user asks. Because it uses a Stripe secret or broadly scoped restricted key and documents direct API authentication, this weakens the intended safety boundary and can enable destructive or financially sensitive actions such as refunds, payouts, transfers, or account changes.

VirusTotal

65/65 vendors flagged this skill as clean.