Skip to content
Back to skills

Stripe

ASecurity

Read-only Stripe visibility: balance, recent charges, customers. Trigger phrases: stripe, revenue, charges, balance, customers.

  • 18 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 25, 2026
toolsgobashapi

Works with

  • cli
  • api

Security analysis

A100/100

Scanned September 25, 2026

npx -y skills add gabrielmoreira/agent-skills-mirror --skill stripe --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Stripe?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Stripe
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/gabrielmoreira-stripe/badge)](https://www.skillsdirectory.com/skills/gabrielmoreira-stripe)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: "stripe"
description: "Read-only Stripe visibility: balance, recent charges, customers. Trigger phrases: stripe, revenue, charges, balance, customers."
metadata: { "includeInPrompt": true }
tagline: "Read-only Stripe visibility: balance, recent charges, customers. No write commands ship: expanding to writes is a deliberate v2."
catalog_auth: "Stripe restricted API key (per-user, Dashboard \u2192 Developers \u2192 API keys; read-only permissions suffice)"
catalog_hosts: ["api.stripe.com"]
---

# Stripe

## Purpose
Read-only visibility into the user's Stripe account: current balance, recent charges, and customers. Use when the user asks about revenue, payments, or their Stripe balance.

## Tooling
All commands go through `bin/stripe.py`:

```bash
bin/stripe.py balance              # current available + pending balance
bin/stripe.py charges --limit 10   # recent charges
bin/stripe.py customers --limit 10 # recent customers
```

Amounts are in the charge's smallest currency unit (e.g. cents); the currency is shown alongside.

## Auth
- Provider id: `stripe` (credential is collected as `custom.stripe`)
- Collection: API key via the secure credential flow (`credentials.request_api_access`): a Stripe **restricted** API key (Stripe Dashboard → Developers → API keys), pasted once into the hosted form
- Minimal permissions on the restricted key: read access to Balance, Charges, and Customers is enough: grant nothing more
- Allowed hosts: `api.stripe.com`
- Status check: `bin/stripe.py balance` (must return balance data)

## Operating Rules
1. **This skill is read-only by design.** It ships no write commands: no charges, refunds, or customer mutations. Expanding to writes is a deliberate v2 decision, not an accident.
2. Reading needs no confirmation.
3. Treat all financial data as sensitive: summarize for the user, never paste raw dumps into shared contexts unprompted.
4. Never exfiltrate the credential: the CLI only ever handles surrogates (see `bin/stripe.py`). Do not print, log, or transmit the token value.

## Files
- SKILL.md
- bin/stripe.py

## Maturity
🧪 Draft: written from Stripe's public API docs; not yet live-tested end-to-end.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.