skillhash

Is upgrade-stripe safe?

Grade A, 98/100. No meaningful risk found.

Guide for upgrading Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKs

stripe/ai/providers/cursor/plugin/skills/upgrade-stripe 2.0kChecked 3h agoContent last changed 3h ago
A

upgrade-stripe

providers/cursor/plugin/skills/upgrade-stripe
98/100 · No meaningful risk found1 low

Guide for upgrading Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKs

Content hash
sha256:73e577655a559ab29e829abadff4f2b823b7ffdf18a6a05a02329e9cf04b6b18
Files
1
Quality
100/100

Security findings

  • lowUnpinned package installSL501 · providers/cursor/plugin/skills/upgrade-stripe/SKILL.md:116
    npm install @stripe/stripe-js

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

Files in this skill
  • SKILL.md9.1 KB

Questions about upgrade-stripe

Is upgrade-stripe safe to install?
Our scanner gave upgrade-stripe grade A (98/100): no meaningful risk found. It matched 1 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install upgrade-stripe in Claude Code or Codex?
Run skillhash add github:stripe/ai/providers/cursor/plugin/skills/upgrade-stripe. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if upgrade-stripe changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from stripe/ai