Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/e2b-dev/e2b/stripe-projectsnpx skills add e2b-dev/E2B --skill stripe-projectsgit clone --depth 1 https://github.com/e2b-dev/E2BWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00051 | $0.01424 |
| Opus 5 | $0.00026 | $0.00712 |
| Sonnet 5 | $0.00010 | $0.00285 |
| Haiku 4.5 | $0.00005 | $0.00142 |
Grade A, and why
stripe-projects scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 171 lines — stays where its author put it; the contents beside it link to each section on GitHub.
E2B Stripe Projects
Use these patterns after E2B sandbox/API access has been provisioned through Stripe Projects.
Credentials
- Stripe Projects provisions E2B sandbox/API access and returns an E2B team API key.
- Use that key as
E2B_API_KEYfor sandbox creation, sandbox control, and SDK clients. - Prefer setting
E2B_API_KEYexplicitly in runtime environments so commands and SDK calls use the intended E2B team. - Local defaults can also come from
.env.localor~/.e2b/config.json. - In Stripe Projects checkouts, the E2B CLI may not be globally logged in. Before using
e2b sandbox ..., prefer a Stripe Projects env pull plus per-command export instead of tryinge2b auth login. - Do not print secret values.
stripe projects env --jsoncan return redacted placeholders, so do not use it as the source for a runnableE2B_API_KEY. Pull the managed env file, then read only the needed E2B variables into the command environment without echoing them.
stripe projects env --pull --yes
env_value() {
awk -F= -v key="$1" '$1 == key {sub(/^[^=]*=/, ""); gsub(/^"|"$/, ""); print; exit}' .env
}
export E2B_API_KEY="$(env_value E2B_API_KEY)"
export E2B_API_URL="$(env_value E2B_API_URL)"
export E2B_DOMAIN="$(env_value E2B_DOMAIN)"
e2b sandbox create base --detach
Stripe Projects CLI
Add E2B to the current Stripe project:
stripe projects add e2b/sandboxes
Inspect or pull provisioned credentials:
stripe projects env
stripe projects env --json
stripe projects env --pull --yes
Export the E2B API key before using the E2B CLI or SDK. Prefer stripe projects env --pull --yes for command execution because JSON output may redact secret values. Read only the variables you need from .env; do not source .env as shell code:
stripe projects env --pull --yes
env_value() {
awk -F= -v key="$1" '$1 == key {sub(/^[^=]*=/, ""); gsub(/^"|"$/, ""); print; exit}' .env
}
export E2B_API_KEY="$(env_value E2B_API_KEY)"
export E2B_API_URL="$(env_value E2B_API_URL)"
export E2B_DOMAIN="$(env_value E2B_DOMAIN)"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 171 lines · 51 tokens per session scan A 0f964fcb8528
stripe-projects is a skill published in the GitHub repository e2b-dev/E2B (13,592 stars, last pushed 3d ago), licensed Apache-2.0. It adds 51 tokens to every session and 1,424 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
frontend-code-review
Use only when the user explicitly requests a review or audit of frontend code under web/ or packages/dify-ui/. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review intent, or backend-only code.
backend-code-review
Use only when the user explicitly requests a review or audit of backend code under api/. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review intent, frontend code, or backend code outside api/.
how-to-write-component
Use when implementing or refactoring React/TypeScript components and the task requires decisions about component ownership, feature boundaries, state, data flow, effects, or interaction ownership. Do not use for review-only requests, test-only work, copy-only edits, or styling-only changes.
e2e-cucumber-playwright
Use when writing, changing, or reviewing Cucumber and Playwright tests under e2e/, including feature files, step definitions, support code, scenario tags, locators, and assertions. Do not use for Vitest, React Testing Library, backend tests, or generic browser automation outside the E2E suite.
frontend-testing
Use when writing or changing Vitest or React Testing Library tests under web/ or packages/dify-ui/, or when the user explicitly requests frontend test strategy, including evaluation of an existing strategy. Do not use for frontend code-review-only requests, general testability discussion, Python tests, or…
e2e-summary-skill
Summarize user input for Agent Builder E2E coverage.