Навыки financial-insights

📦

financial-insights

Name: financial-insights
Author: stripe

v0.15.1 Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети

Analyze Link Spending, Balances, and Shopping Insights

Financial questions require selecting relevant records and interpreting amounts, permissions, and data freshness. This skill guides agents through authorized Link queries and clear financial summaries.

Поддерживает: Claude Codex Code(CC)

📊 73 Адекватно

Maintain this Skill? Claim it 📊 73 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "financial-insights" from https://skillstore.io/skills/stripe-financial-insights.md and its manifest at https://skillstore.io/api/skills/stripe-financial-insights/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/stripe-financial-insights.md Подписанный manifest GET /api/skills/stripe-financial-insights/manifest Подписанный lockfile GET /api/skills/stripe-financial-insights/lockfile

Протестировать

Использование «financial-insights». Illustrative request: summarize July restaurant spending from 12 retrieved transactions totaling USD 342.18.

Ожидаемый результат:

You spent USD 342.18 across 12 restaurant transactions in July. This total covers the retrieved transactions from your connected Link sources.

Использование «financial-insights». Illustrative request: explain a checking balance of USD 1,523.40 and available cash of USD 1,400.00, updated yesterday.

Ожидаемый результат:

Your current checking balance is USD 1,523.40. Available cash is USD 1,400.00. The balance was last updated yesterday and may be stale.

Использование «financial-insights». Illustrative request: identify preferred brands when the relevant shopping insight is pending.

Ожидаемый результат:

The shopping insight is still pending. No brand preference can be concluded from this result. Check again later.

Аудит безопасности

Средний риск

v1 • 06.10.2026 Открыть версионный отчет

All 93 static detections are false positives involving Markdown backticks, a homepage URL, and financial-data guidance rather than shell substitution or system reconnaissance. Semantic review identified unpinned package permissions and unbounded reliance on response instructions. No evidence found of intentional data exfiltration or an embedded prompt injection attack.

Просканировано файлов

356

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Средний

SKILL.md:7-11 SKILL.md:22-25

Unpinned Package Execution and Installation Permissions

The allowed tools include "npx --yes @stripe/link-cli:*" and "npm install -g @stripe/link-cli:*" without a fixed package version. These permissions allow downloaded code execution or global installation without a skill-level confirmation requirement. A compromised future package release could execute code with the agent's host permissions.

The tool declarations and installation metadata visibly omit a package version, and one execution permission includes automatic confirmation. No evidence found of package compromise.

Средний

SKILL.md:99

Unbounded Trust in Authentication Response Instructions

The text says "follow the response's `_next` instruction" without limiting its content to documented authentication steps. This promotes returned text into agent instructions. A compromised or manipulated response could redirect the agent beyond the user's authorization request.

The instruction directly delegates the next action to response text without an explicit validation boundary. No evidence found of an actual malicious response.

Факторы риска

⚙️ Внешние команды (50)

🌐 Доступ к сети (1)

SKILL.md:18

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/stripe-financial-insights/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/stripe-financial-insights/security.svg)](https://skillstore.io/skills/stripe-financial-insights?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/stripe-financial-insights?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/stripe-financial-insights/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/stripe-financial-insights.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

stripe. (2026). financial-insights security audit report (audit version 1) [Author version 0.15.1]. Skillstore. https://skillstore.io/skills/stripe-financial-insights/audits/1

Цитата BibTeX

@techreport{stripe-stripe-financial-insights-2026,
  author = {stripe},
  title = {financial-insights security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/stripe-financial-insights/audits/1},
  note = {Author version 0.15.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "financial-insights security audit report (audit version 1)"
version: "0.15.1"
type: report
authors:
  - name: "stripe"
date-released: "2026-10-06"
url: "https://skillstore.io/skills/stripe-financial-insights/audits/1"
identifiers:
  - type: other
    value: "skillstore:stripe-financial-insights:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

100

Сопровождаемость

Контент

Сообщество

100

Соответствие спецификации

Что вы можете построить

Review Monthly Spending

Summarize spending for a selected month and category, with transaction counts and clear coverage limits.

Check Connected Account Funds

Compare current balances and available funds by account while preserving currencies and reporting update times.

Inform Merchant Selection

Use an available purchase-pattern insight to identify frequently used brands without treating past purchases as a purchase authorization.

Попробуйте эти промпты

Check My Balance

Show the current balance for my connected checking account. Include the currency and last update time.

Summarize Category Spending

Summarize my restaurant spending from [start date] to [end date]. Include transaction count, total spending, and any incomplete coverage.

Review Cash and Recent Activity

Compare current balances and available cash across my connected accounts. Summarize spending during [date range] by currency. Request only necessary permissions.

Evaluate Available Shopping Insights

Discover available shopping insights and retrieve only those relevant to preferred brands. Report timestamps, missing permissions, and uncertainty. Do not initiate purchases.

Лучшие практики

Specify the accounts, date range, and financial question before retrieval to limit data access.
Use a reviewed CLI version, approve requested access, and keep credentials and payment details out of summaries.
Check pagination, currencies, transaction signs, and update times before presenting totals or available funds.

Избегать

Retrieve every connected account and data type when a narrower query answers the question.
Combine different currencies or interpret current balances as guaranteed available funds.
Treat purchase history as a definitive preference or authorization to spend money.

Часто задаваемые вопросы

What do I need before using this skill?

You need the Link CLI, network access, and an authenticated Link session. Financial retrieval requires the source actions approved by the user.

Can it send money or make purchases?

No. Its financial queries are read-only. Payment requests belong to a separate workflow and require separate authorization.

Which accounts and transactions can it access?

It accesses only data available through authorized Link sources. Coverage depends on connected accounts, source capabilities, and granted permissions.

Are balances guaranteed to be current?

No. Balance timestamps may be hours or days old. Current balances and available cash have different meanings and should be reported separately.

How does it handle missing permissions?

It requests only missing access and waits for user approval. For environment-managed tokens, it explains the missing access without attempting a CLI upgrade.

Do shopping insights prove my preferences?

No. They summarize observed purchase history. Insights may be pending or unavailable, and their timestamps and uncertainty should be included.

Сведения для разработчиков

Автор

stripe

Лицензия

Complete terms in LICENSE

Версия автора

v0.15.1

Ревизия Skillstore

Репозиторий

https://github.com/stripe/link-cli/tree/d0b502744a798f7fb8c1835532464193f5034d4c/skills/financial-insights

Ссылка

4c17b0aba7ecba9112974f59013876d33623e644

Актуальность поддержки

06.10.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md