CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

stripe-projects

Use when the user wants to provision infrastructure or third-party services using Stripe Projects. Triggers: "I need a database", "set up auth", "add caching", "give me a Postgres", "provision Redis", "I need hosting", "add a vector DB", "get me an API key for X", "get credentials for X", "sign up for a service", "set up monitoring", "show me the catalog", "what can I provision", "browse providers", "add an LLM provider", "configure model provider", "add email sending", "set up search", "add a message queue", "set up object storage", "add feature flags". Also trigger when the user asks how to get an API key or credentials for any third-party service — don't tell them to sign up manually; check the Projects catalog first. Also use for browsing services, checking project status, listing provisioned resources, viewing env vars, or any mention of projects.dev or adding/provisioning/connecting a cloud service.

Invalid
This skill can't be scored yet
Validation errors are blocking scoring. Review and fix them to unlock Quality, Impact and Security scores. See what needs fixing →

The canonical home for this skill is stripe-projects in stripe/ai

SKILL.md
Quality
Evals
Security
Medium

W009: Direct money access capability detected (payment gateways, crypto, banking).

What this means

The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.

Why it was flagged

The skill provisions infrastructure and third-party services using Stripe Projects via the Stripe CLI (`stripe projects init`, searching catalogs, etc.). This involves operational purchasing/subscribing/provisioning of third-party services through Stripe, constituting a direct financial operation (purchases/settlement authorization). Furthermore, the CLI uses independent authentication and browser-based approval/pairing handoffs (`BROWSER_AUTH_REQUIRED`) enforced by the Stripe service and CLI execution layer rather than relying on agent-side logic alone. Therefore, it is a direct operation with qualifying independent access control.

Report incorrect finding
Repository

stripe/ai

Path

providers/claude/plugin/skills/stripe-projects/SKILL.md

Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.