stripe-automation
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s functionality aligns with Stripe automation, but it relies on a third-party MCP gateway that brokers authentication and all payment operations, and it enables high-impact financial actions. This is not confirmed malware, but the indirect data flow, misleading 'no API keys needed' claim, and autonomous transaction potential make it high risk.
Confidence: 89%Severity: 79%
Audit Metadata