The Agent Skills Directory

[SAFE]: The skill provides standard, high-quality implementation patterns for the Stripe API. All security-sensitive operations follow industry best practices.
[CREDENTIALS_SAFE]: The code examples correctly demonstrate using os.environ["STRIPE_SECRET_KEY"] and os.environ["STRIPE_WEBHOOK_SECRET"] rather than hardcoding credentials.
[COMMAND_EXECUTION]: No dangerous shell commands or arbitrary code execution patterns were detected.
[DATA_EXFILTRATION]: No patterns of sensitive data exfiltration or unauthorized network requests were found. Network operations are limited to official Stripe API endpoints via the stripe Python library.
[OBFUSCATION]: The content is clear and uses no obfuscation techniques like Base64 encoding of commands or hidden characters.
[INDIRECT_PROMPT_INJECTION]: While the skill processes customer metadata and webhook payloads, it explicitly instructs on sanitization, signature verification, and idempotency to mitigate risks associated with external data ingestion.

stripe-integration