Stripe Reporting Agent

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The functional scope matches a Stripe integration, but install trust is weakened by a publisher mismatch: the skill presents itself through Stripe ecosystem branding while being installed from a third-party skills repository, and one alternate installer lacks provenance in the provided evidence. Credential use is plausible for Stripe tasks, but the transitive skill-install chain and unclear direct-to-Stripe data path make this a medium-risk skill rather than a clearly benign one.

Confidence: 82%Severity: 64%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:36 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fstripe-reporting-agent%2F@51c6618ccdc0694d5f628e34e7238071d359aeec