stripe-automation

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s functionality aligns with Stripe automation, but it relies on a third-party MCP gateway that brokers authentication and all payment operations, and it enables high-impact financial actions. This is not confirmed malware, but the indirect data flow, misleading 'no API keys needed' claim, and autonomous transaction potential make it high risk.

Confidence: 89%Severity: 79%
Audit Metadata
Analyzed At
Apr 16, 2026, 04:39 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fstripe-automation%2F@193e6f349cec36ee94a77a4468d431086696d16a