OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The Stripe Payments skill provides comprehensive tools for managing financial transactions. The analysis identified a potential surface for indirect prompt injection because the skill processes external data from Stripe webhooks and customer records without explicit sanitization or boundary delimiters. However, no high-risk patterns such as credential theft, malicious code execution, or data exfiltration were detected.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed