Analyze Link Spending, Balances, and Shopping Insights
Financial questions require selecting relevant records and interpreting amounts, permissions, and data freshness. This skill guides agents through authorized Link queries and clear financial summaries.
Review the Skillstore skill "financial-insights" from https://skillstore.io/skills/stripe-financial-insights.md and its manifest at https://skillstore.io/api/skills/stripe-financial-insights/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
All 93 static detections are false positives involving Markdown backticks, a homepage URL, and financial-data guidance rather than shell substitution or system reconnaissance. Semantic review identified unpinned package permissions and unbounded reliance on response instructions. No evidence found of intentional data exfiltration or an embedded prompt injection attack.
Unpinned Package Execution and Installation Permissions
The allowed tools include "npx --yes @stripe/link-cli:*" and "npm install -g @stripe/link-cli:*" without a fixed package version. These permissions allow downloaded code execution or global installation without a skill-level confirmation requirement. A compromised future package release could execute code with the agent's host permissions.
The tool declarations and installation metadata visibly omit a package version, and one execution permission includes automatic confirmation. No evidence found of package compromise.
Unbounded Trust in Authentication Response Instructions
The text says "follow the response's `_next` instruction" without limiting its content to documented authentication steps. This promotes returned text into agent instructions. A compromised or manipulated response could redirect the agent beyond the user's authorization request.
The instruction directly delegates the next action to response text without an explicit validation boundary. No evidence found of an actual malicious response.
stripe. (2026). financial-insights security audit report (audit version 1) [Author version 0.15.1]. Skillstore. https://skillstore.io/skills/stripe-financial-insights/audits/1
BibTeX 引用
@techreport{stripe-stripe-financial-insights-2026,
author = {stripe},
title = {financial-insights security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/stripe-financial-insights/audits/1},
note = {Author version 0.15.1}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "financial-insights security audit report (audit version 1)"
version: "0.15.1"
type: report
authors:
- name: "stripe"
date-released: "2026-10-06"
url: "https://skillstore.io/skills/stripe-financial-insights/audits/1"
identifiers:
- type: other
value: "skillstore:stripe-financial-insights:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據證據置信度: 中
55
架構
100
可維護性
87
內容
65
社群
100
規範符合度
你可以打造什麼
Review Monthly Spending
Summarize spending for a selected month and category, with transaction counts and clear coverage limits.
Check Connected Account Funds
Compare current balances and available funds by account while preserving currencies and reporting update times.
Inform Merchant Selection
Use an available purchase-pattern insight to identify frequently used brands without treating past purchases as a purchase authorization.
試試這些提示
Check My Balance
Show the current balance for my connected checking account. Include the currency and last update time.
Summarize Category Spending
Summarize my restaurant spending from [start date] to [end date]. Include transaction count, total spending, and any incomplete coverage.
Review Cash and Recent Activity
Compare current balances and available cash across my connected accounts. Summarize spending during [date range] by currency. Request only necessary permissions.
Evaluate Available Shopping Insights
Discover available shopping insights and retrieve only those relevant to preferred brands. Report timestamps, missing permissions, and uncertainty. Do not initiate purchases.
最佳實務
Specify the accounts, date range, and financial question before retrieval to limit data access.
Use a reviewed CLI version, approve requested access, and keep credentials and payment details out of summaries.
Check pagination, currencies, transaction signs, and update times before presenting totals or available funds.
避免
Retrieve every connected account and data type when a narrower query answers the question.
Combine different currencies or interpret current balances as guaranteed available funds.
Treat purchase history as a definitive preference or authorization to spend money.
常見問題
What do I need before using this skill?
You need the Link CLI, network access, and an authenticated Link session. Financial retrieval requires the source actions approved by the user.
Can it send money or make purchases?
No. Its financial queries are read-only. Payment requests belong to a separate workflow and require separate authorization.
Which accounts and transactions can it access?
It accesses only data available through authorized Link sources. Coverage depends on connected accounts, source capabilities, and granted permissions.
Are balances guaranteed to be current?
No. Balance timestamps may be hours or days old. Current balances and available cash have different meanings and should be reported separately.
How does it handle missing permissions?
It requests only missing access and waits for user approval. For environment-managed tokens, it explains the missing access without attempting a CLI upgrade.
Do shopping insights prove my preferences?
No. They summarize observed purchase history. Insights may be pending or unavailable, and their timestamps and uncertainty should be included.