paddle
Paddle integration. Manage Deals, Persons, Organizations, Leads, Projects, Pipelines and more. Use when the user wants to interact with Paddle data.
61
72%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Medium
Suggest reviewing before use
Fix and improve this skill with Tessl
tessl review fix ./skills/paddle/SKILL.mdW009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The SKILL.md documentation details an integration for **Paddle**, which is explicitly described as a complete payments platform for SaaS businesses handling subscriptions, invoicing, and global tax compliance. The skill provides mechanisms via the Membrane CLI to connect to Paddle, list actions, run actions, and make direct proxy requests to Paddle APIs (`membrane request CONNECTION_id /path/to/endpoint`), enabling interaction with payment-related operations, subscriptions, checkout, and invoices. Because this specifically integrates with a payment gateway/billing platform (Paddle) to execute operations on payment systems, it grants Direct Financial Execution Authority.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The agent interacts with Paddle via Membrane to manage deals, customers, subscriptions, and other payment platform data, which can include user-submitted or external customer data from the platform.
- Repository
- membranedev/application-skills
- Commit
f484c82
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.