📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills stripe-automation
📦
stripe-automation
Content revision r1 High Risk ⚙️ External commands🌐 Network access
Automate Stripe Operations with Rube MCP
Stripe operations require exact IDs, amount units, and tool sequences. This skill guides Claude, Codex, and Claude Code through Rube MCP workflows for common Stripe tasks.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "stripe-automation" from https://skillstore.io/skills/sickn33-stripe-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-stripe-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "stripe-automation". Find a customer by email and update the billing note.
Expected outcome:
The skill first searches customers, shows matching customer IDs, asks which customer to update, then prepares the metadata change.
Using "stripe-automation". Refund 50 dollars on a specific charge.
Expected outcome:
The skill converts the amount to 5000 cents, verifies the charge, and asks for approval before creating a partial refund.
Using "stripe-automation". Create a subscription for a customer with a known price.
Expected outcome:
The skill retrieves available subscription tools, confirms the customer and price item, then prepares the subscription request.
Security Audit
High Riskv4 • 7/7/2026 Open versioned report
Most static external command findings are false positives from Markdown backticks around tool names and parameters. The hardcoded Rube MCP URL is a real external dependency, and semantic review found risk from privileged Stripe operations without explicit approval or trust-boundary guidance. No prompt injection text was found in SKILL.md.
1
Files scanned
199
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
High
High-Impact Stripe Actions Lack Explicit Approval Step
SKILL.md lists workflows for creating or confirming payments, capturing charges, creating subscriptions and invoices, and issuing refunds. It does not require an explicit user approval step before these financial mutations.
The documented tool sequences include direct money movement and billing state changes. The surrounding workflow text does not show a confirmation gate, amount preview, or test-mode requirement.
Medium
Third-Party MCP Handles Stripe Authorization
The setup directs users to add an external Rube MCP endpoint and connect the Stripe toolkit through RUBE_MANAGE_CONNECTIONS. This creates a trust boundary for Stripe account access that is not explained in the skill.
The endpoint and Stripe connection instructions are explicit in the setup section. The risk depends on user authorization scope, so confidence is high but not absolute.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
Line 20 directs users to add https://rube.app/mcp as an external MCP server. This is legitimate setup documentation, but the hardcoded external network dependency is real.
Risk Factors
⚙️ External commands (57)
SKILL.md:15 SKILL.md:16 SKILL.md:20 SKILL.md:23 SKILL.md:24 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:41 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:66 SKILL.md:67 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:104 SKILL.md:105 SKILL.md:106 SKILL.md:109 SKILL.md:116 SKILL.md:117 SKILL.md:118 SKILL.md:119 SKILL.md:122 SKILL.md:123 SKILL.md:134 SKILL.md:135 SKILL.md:136 SKILL.md:139 SKILL.md:140 SKILL.md:141 SKILL.md:158 SKILL.md:159 SKILL.md:160 SKILL.md:161 SKILL.md:170 SKILL.md:171 SKILL.md:172
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-stripe-automation/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-stripe-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-stripe-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-stripe-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-stripe-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). stripe-automation security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-stripe-automation/audits/4BibTeX citation
@techreport{sickn33-sickn33-stripe-automation-2026,
author = {sickn33},
title = {stripe-automation security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-stripe-automation/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "stripe-automation security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-stripe-automation/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-stripe-automation:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Customer Support Updates
Search customers, review billing records, and update customer metadata after verifying the customer ID.
Revenue Operations Review
List subscriptions, invoices, products, and prices to reconcile account state before billing changes.
Developer Billing Tasks
Create test payment intents, subscriptions, invoices, or refunds while checking amount units and object IDs.
Try These Prompts
Find a Customer
Use the Stripe automation skill to search for a customer by email. Show the matching customer IDs before suggesting any update.
Create a Draft Invoice
Use Rube MCP to create a draft Stripe invoice for this customer. Confirm collection method, due date, and auto_advance setting first.
Review a Subscription Change
List the customer subscriptions, retrieve the target subscription, and summarize the price IDs before preparing an update.
Plan a Refund Safely
Review the charge, confirm the refund amount in smallest currency units, and prepare the refund request only after my approval.
Best Practices
- Search or retrieve objects before creating charges, subscriptions, invoices, or refunds.
- Confirm amounts in the smallest currency unit before every payment or refund action.
- Use test mode or limited permissions when validating new Stripe workflows.
Avoid
- Do not create direct charges when a payment intent flow is available.
- Do not issue refunds or capture payments without explicit user approval.
- Do not assume email addresses uniquely identify Stripe customers.
Frequently Asked Questions
Does this skill require Rube MCP?
Yes. It requires Rube MCP and an active Stripe connection through the stripe toolkit.
Can it charge customers?
It documents payment intent, charge, and capture workflows. Users should require explicit approval before any money movement.
Does it store Stripe API keys?
No evidence in SKILL.md shows stored API keys. It instructs users to connect through Rube MCP authorization.
Can it manage subscriptions?
Yes. It lists subscription create, retrieve, list, and update workflows through Stripe tools.
What Stripe objects can it handle?
It covers customers, charges, payment intents, subscriptions, invoices, products, prices, refunds, and payment methods.
What is the main safety concern?
The main concern is high-impact financial actions through a third-party MCP without explicit approval gates.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
4 downloads · 84 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
lark-doc
87Manage Lark Docs and Feishu Wiki Content
by larksuite
Teams need reliable document updates without switching between tools. This skill guides Claude, Codex, and Claude Code through authenticated lark-cli workflows for Lark Docs.
Office & Reports View
📦
pptx
85Create PowerPoint Presentations with Python
by AutumnsGrove
Building polished PowerPoint decks by hand is slow and hard to repeat. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, and automation with python-pptx.
Office & Reports View
📦
Process PDFs with Extraction and Form Tools
by ZhanlinCui
PDF work often requires separate tools for text, tables, pages, and forms. This skill gives Claude, Codex, and Claude Code guided workflows and helper scripts for PDF tasks.
Office & Reports View
📦
libreoffice-impress
80Create and Edit LibreOffice Impress Decks
by dfk1352
Manual Impress deck updates are slow when slides, notes, charts, and media need repeated changes. This skill automates local .odp editing, export, patch workflows, and slide snapshots.
Office & Reports View
📦
invoice-ocr-sorter
80Organize Invoices With OCR
by zhangchenlai-dev
Invoice images and PDFs are hard to compare when details stay trapped in files. This skill guides OCR extraction, category sorting, and Excel-ready summaries.
Office & Reports View
📦
building-agents
85Build Claude Code Agents
by C0ntr0lledCha0s
Creating reliable AI agents requires clear schemas, safe tools, and repeatable review steps. This skill guides agent design, validation, migration, and maintenance for Claude Code workflows.
Coding & Development View