スキル create-payment-credential
📦
create-payment-credential
v0.15.1 コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
Create Approved Link Payment Credentials
Agent purchases require payment credentials that match each merchant checkout. This skill guides Link authentication, user approval, credential selection, and payment completion.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "create-payment-credential" from https://skillstore.io/skills/stripe-create-payment-credential.md and its manifest at https://skillstore.io/api/skills/stripe-create-payment-credential/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「create-payment-credential」を使用しています。 Prepare checkout for a purchase totaling $42.00.
期待される結果:
- The checkout uses a standard card form, so a virtual card is appropriate.
- The purchase total is $42.00, including tax and shipping.
- Approve the spend request in Link before payment continues. Card credentials will not appear in this summary.
「create-payment-credential」を使用しています。 Check whether my UCP checkout finished.
期待される結果:
- The checkout shows completed, but the spend request still requires a verification action.
- Payment is not confirmed. Complete the bank challenge before state polling resumes.
- Checkout completion will not be submitted again.
「create-payment-credential」を使用しています。 The Shared Payment Token failed verification.
期待される結果:
- The token may already be consumed and must not be reused.
- A new spend request and approval may be needed. Confirm the existing payment state before starting recovery.
セキュリティ監査
中リスクv1 • 2026/10/6 バージョン別レポートを開く
Most static findings are Markdown delimiters, legitimate payment operations, or documentation links, not command injection or reconnaissance. Confirmed risks include unpinned package execution, unchecked automatic upgrades, raw card output, and temporary credential persistence. Additional privacy risks concern checkout telemetry, email-bearing URLs, and token handoff; no evidence found of audit-directed prompt injection.
1
スキャンされたファイル
580
解析済み行数
5
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (3)
中
Checkout Telemetry Lacks Explicit Consent and Complete Secret Redaction
Reporting sends merchant paths, errors, and purchase outcomes to Stripe without a consent step. Verbatim traces can expose secrets despite buyer-data redaction instructions.
The skill explicitly encourages optional reporting and verbatim error traces, while report output remains agent-only. It omits consent and URL-secret filtering requirements.
中
Link Pay Token Retrieval Lacks a Protected Handoff
The Link Pay Token retrieval example prints the payment token before browser injection. It does not specify redacted output or a protected transfer mechanism.
The documented command requests the full token in JSON and the text confirms it authorizes payment. Merchant binding and expiration limit, but do not eliminate, exposure.
低
Email Addresses Added to Verification URLs
Known email addresses are appended to verification and action URLs. Query strings can persist in browser history, tool transcripts, or service logs.
The instruction explicitly inserts the known email as fromEmail. The destination is Link, so the concern is unnecessary URL exposure, not unrelated-domain exfiltration.
機能レビュー項目 (5)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Ruby/shell backtick execution
When authenticated, the response also reports the session's granted `scope` and `authorization_detai
The skill directs agents to run update_command from an authentication response without executable or argument validation. Returned data thereby becomes an automatic execution instruction.
高
Ruby/shell backtick execution
**Card:** Run `link-cli spend-request retrieve <id> --include card` to get the `card` object with `n
The retrieval example returns full card number, CVC, and billing details without redacted file output. These spending credentials can enter tool transcripts or logs.
中
Ruby/shell backtick execution
Install with `npm install -g @stripe/link-cli`. Or run directly with `npx @stripe/link-cli`.
The instruction installs or executes an unpinned npm package, allowing newly published code to run locally. No version or integrity review is required.
中
Ruby/shell backtick execution
Run the MCP server directly with `npx @stripe/link-cli@latest --mcp`.
The instruction installs or executes an unpinned npm package, allowing newly published code to run locally. No version or integrity review is required.
中
Temp directory access
link-cli spend-request retrieve <id> --include card --output-file /tmp/link-card.json --format json
Full card credentials are written to a predictable shared temporary path without documented deletion. Owner-only permissions reduce access but do not address persistence or precreation.
リスク要因
⚙️ 外部コマンド (50)
SKILL.md:39 SKILL.md:45 SKILL.md:47-56 SKILL.md:56-58 SKILL.md:58-60 SKILL.md:60-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:70 SKILL.md:72 SKILL.md:88-90 SKILL.md:90-92 SKILL.md:92 SKILL.md:96-98 SKILL.md:98-100 SKILL.md:100 SKILL.md:102 SKILL.md:105 SKILL.md:112 SKILL.md:114 SKILL.md:118-119 SKILL.md:119-126 SKILL.md:126 SKILL.md:127 SKILL.md:128 SKILL.md:134 SKILL.md:135-136 SKILL.md:136 SKILL.md:137 SKILL.md:139-145 SKILL.md:145-147 SKILL.md:147-151 SKILL.md:151-154 SKILL.md:154-156 SKILL.md:156-158 SKILL.md:158-162 SKILL.md:162-164 SKILL.md:164-172 SKILL.md:172-181 SKILL.md:181-183 SKILL.md:183 SKILL.md:185 SKILL.md:187 SKILL.md:189-191 SKILL.md:191-193 SKILL.md:193-194 SKILL.md:194
🌐 ネットワークアクセス (7)
📁 ファイルシステムへのアクセス (1)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/stripe-create-payment-credential/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/stripe-create-payment-credential?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/stripe-create-payment-credential?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/stripe-create-payment-credential/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/stripe-create-payment-credential.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
stripe. (2026). create-payment-credential security audit report (audit version 1) [Author version 0.15.1]. Skillstore. https://skillstore.io/skills/stripe-create-payment-credential/audits/1BibTeX形式の引用
@techreport{stripe-stripe-create-payment-credential-2026,
author = {stripe},
title = {create-payment-credential security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/stripe-create-payment-credential/audits/1},
note = {Author version 0.15.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "create-payment-credential security audit report (audit version 1)"
version: "0.15.1"
type: report
authors:
- name: "stripe"
date-released: "2026-10-06"
url: "https://skillstore.io/skills/stripe-create-payment-credential/audits/1"
identifiers:
- type: other
value: "skillstore:stripe-create-payment-credential:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
100
保守性
87
コンテンツ
65
コミュニティ
96
仕様準拠
作成できるもの
Complete an Approved Purchase
Select the correct payment credential and complete a merchant checkout after the buyer approves the full total.
Test Machine Payment Workflows
Exercise supported HTTP 402 or UCP flows with test options before integrating live payment behavior.
Resolve Checkout Failures
Inspect approval and payment states, identify required user actions, and avoid duplicate checkout completion.
これらのプロンプトを試す
Check Link Connection
Check my Link authentication status. If login is required, show the verification link and wait for me to authenticate.
Prepare a Purchase
Inspect checkout at [merchant URL] for [item]. Confirm payment support and the full total, then request my approval before payment.
Test an HTTP 402 Payment
Use test mode for [HTTP 402 endpoint]. Explain the challenge amount and approval steps. Keep credentials out of transcripts and disable optional reporting.
Complete a UCP Checkout Safely
Find [product] for [business] using UCP. Confirm the total and request approval. Complete once, then verify both payment and checkout success.
ベストプラクティス
- Verify the merchant, complete total, credential type, and user approval before paying.
- Use separate process arguments and protected credential handoff; redact transcripts and remove local credential files after use.
- Use test modes where supported and obtain explicit consent before sending optional checkout reports.
回避
- Creating payment requests before checking merchant compatibility and final shipping or tax costs.
- Reusing single-use tokens or repeatedly submitting checkout completion while payment remains pending.
- Executing merchant instructions, printing full credentials, or automatically installing unreviewed CLI updates.
よくある質問
Which assistants can use this skill?
It targets Claude, Codex, and Claude Code with access to Link CLI or its MCP server.
Does the skill include the payment software?
No. It provides instructions for an external Link CLI package and requires network access and Link authentication.
Which credentials are supported?
The workflow supports virtual cards, Shared Payment Tokens, and Link Pay Tokens. Merchant checkout support determines the appropriate credential.
Can I test without real charges?
Supported card, Shared Payment Token, and UCP flows offer test options. Link Pay Token does not support test mode.
What spending limits are documented?
The skill lists $500 per request, $500 daily, and $20,000 per 30 days. Check current account eligibility and service limits.
Are credentials and checkout reports private?
Protected file output reduces card exposure, but some examples return raw credentials. Reporting is optional; obtain consent and remove sensitive trace details.