Demo verdict. This skill and its findings are illustrative data from our product demo, not a real detonation. Real verdicts are on the leaderboard.
stripe/agent-toolkit@2.0.4
VERIFIEDVerified PublisherPublisher claims: "Create payment links, customers, and invoices from your agent." Observed in sandbox:
Registry Anthropic partner directoryPublisher stripe · verified org · signing key rotated 47d agoInstalls 607KLast detonated 95d ago
Is stripe/[email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (3 scenarios) on 2026-07-24 and scored it 98/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. The publisher is verified.
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
No findings across 2,114 lines in 9 files.