Versioned security assessment

Report ID: SA-1CEA59ED

6/30/2026, 6:02:17 PM

stripe-automation security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
stripe-automation
Version
v2
Maintainer
sickn33
Source
github.com/sickn33/antigravity-awesome-skills/tree/main/skills/stripe-automation
Coverage
1 Files scanned · 199 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The 64 external-command findings and the high weak-crypto and reconnaissance blockers are false positives from Markdown inline code and Stripe documentation text. The remaining risk is medium because the skill depends on a third-party MCP endpoint and documents state-changing Stripe billing operations.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 199 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 2 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
SKILL.md:4-5SKILL.md:20
Third-Party MCP Handles Stripe Operations
The skill requires Rube MCP and directs users to add the rube.app MCP endpoint for Stripe automation. This creates a third-party dependency for payment workflows and connected Stripe access.
The MCP requirement and hardcoded Rube endpoint are explicit. The risk depends on user authorization and Rube account configuration, so it is not evidence of malicious intent.
RISK-002 Medium
SKILL.md:56-60SKILL.md:78-82SKILL.md:98-101SKILL.md:133-136
State-Changing Payment Workflows
The skill documents creation and modification of customers, payment intents, charges, subscriptions, invoices, and refunds. These actions can affect money movement or customer billing if used without confirmation.
The listed tool sequences include multiple write operations for payments and billing objects. The operations are legitimate for a Stripe skill, but they are high-impact.
Needs review findings (1)
REVIEW-001 Medium
SKILL.md:23-26SKILL.md:51-60SKILL.md:129-136
Limited Built-In Guardrails for Live Billing Changes
The skill emphasizes connection setup and current schemas, but it does not require test mode, scoped permissions, or explicit approval before charge, subscription, invoice, or refund actions.
The referenced sections describe setup and write workflows without approval safeguards. This is a contextual risk from omissions, not a direct exploit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:15-16SKILL.md:35-38SKILL.md:56-60SKILL.md:170-172
External Command Static Matches Are Markdown Tool Names
The analyzer interpreted Markdown inline code around Rube and Stripe tool names as Ruby shell backticks. No executable Ruby, shell invocation, or user-controlled command construction was found.
The matched text is Markdown documentation using inline code formatting. There is no source file containing executable backtick command evaluation.
Low
SKILL.md:3SKILL.md:43SKILL.md:67SKILL.md:71
Weak Cryptography Static Matches Are Documentation Text
The high weak-cryptography findings are false positives in prose and parameter documentation. No cryptographic algorithm implementation or weak hashing call was found.
The cited lines contain YAML description text, field names, and Stripe parameter guidance. No executable crypto code is present in the skill.
Low
SKILL.md:48SKILL.md:86SKILL.md:90
System Reconnaissance Static Matches Are Stripe Guidance
The reconnaissance findings are false positives from normal Stripe workflow guidance, such as searching customers and using valid subscription inputs. No host or environment probing was found.
The cited lines discuss Stripe records and billing requirements. They do not instruct the model to inspect the local machine or enumerate system data.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable