stripe
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Stripe payment-integration skill and contains concrete, specific payment gateway APIs and operations. It includes examples and functions that directly create payment/subscription sessions (stripe.checkout.sessions.create), manage billing portal sessions (stripe.billingPortal.sessions.create), initialize Stripe with secret keys, handle webhook events (invoice.paid, checkout.session.completed, subscription changes) and guidance for payment intents/checkout — all of which are direct payment-processing capabilities. This is not a generic tool or browser automation; it is specifically designed to move/process money via Stripe.
Audit Metadata