Stripe API Integration

• Risk level: Low
• Analyzed: Feb 24, 2026, 12:20 AM
• Findings: 0
• Version: 1.0.2

Overview

The skill's requests and instructions match a Stripe integration: it only asks for the Stripe API and webhook secrets and a local config path, and its docs show legitimate Stripe API usage without unexpected network destinations or installs.

This skill appears coherent for Stripe integration. Before installing: (1) confirm you only provide STRIPE_SECRET_KEY and STRIPE_WEBHOOK_SECRET (both are necessary); (2) check the ~/stripe-api-integration/ memory.md file contents after use to ensure no secrets were saved; (3) prefer using test keys (sk_test_*) when trying the skill; and (4) because the skill can run autonomously when invoked by the agent, avoid granting it workspace-wide credentials beyond the two Stripe secrets. If you need stronger guarantees, run interactions in an isolated account or with test keys first.