Stripe API

Use Stripe's live REST API for authenticated account inspection and operational lookup. Use when you need to connect to a Stripe account with a secret key, i...

This skill appears to be a straightforward Stripe read-only helper, but proceed carefully: (1) the skill requires STRIPE_SECRET_KEY at runtime even though the registry metadata doesn't declare it — verify this before installing; (2) only use a limited/restricted Stripe key or a test key when possible (do not paste or reuse a production full-access key unless you trust the source); (3) review the included scripts yourself — they only call api.stripe.com and print results, but you should confirm there are no hidden network calls; (4) prefer creating a restricted API key scoped to read-only endpoints or a test account; (5) if you must share a live key with this skill, rotate the key afterwards; and (6) ask the publisher to update the metadata to declare STRIPE_SECRET_KEY as the primary credential and publish a verifiable homepage/source so you can validate provenance.

Type: OpenClaw Skill Name: stripe-api-readonly Version: 1.0.0 The skill is a legitimate tool for interacting with the Stripe API. The Python script `scripts/stripe_api.py` uses only standard libraries to perform authenticated requests to the official Stripe API endpoint (api.stripe.com) and does not exhibit any signs of data exfiltration, obfuscation, or unauthorized execution. The documentation in `SKILL.md` and `references/objects-and-workflows.md` emphasizes security best practices, such as avoiding hardcoded secrets and preferring read-only operations.