stripe-projects

Instructions for using an E2B API key supplied through Stripe Projects. E2B provides temporary computer environments that code can control.

In plain words
What is it for?
Use it after Stripe Projects has enabled E2B access and you need to create or control sandboxes or use E2B's JavaScript, Python, or Code Interpreter tools.
Why use it?
It explains how to load the managed key safely and use it with E2B command-line tools and software libraries without exposing the secret.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/e2b-dev/e2b/stripe-projects
Any agent
npx skills add e2b-dev/E2B --skill stripe-projects
Clone the repo
git clone --depth 1 https://github.com/e2b-dev/E2B

Made for: Claude Code, Codex.

Per session 51 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,424 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00051 $0.01424
Opus 5 $0.00026 $0.00712
Sonnet 5 $0.00010 $0.00285
Haiku 4.5 $0.00005 $0.00142

Measured yesterday against content hash 0f964fcb8528, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

stripe-projects scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/stripe-projects/SKILL.md · 171 lines

How it starts

The opening of the file, as written. The whole thing — 171 lines — stays where its author put it; the contents beside it link to each section on GitHub.

E2B Stripe Projects

Use these patterns after E2B sandbox/API access has been provisioned through Stripe Projects.

Credentials

  • Stripe Projects provisions E2B sandbox/API access and returns an E2B team API key.
  • Use that key as E2B_API_KEY for sandbox creation, sandbox control, and SDK clients.
  • Prefer setting E2B_API_KEY explicitly in runtime environments so commands and SDK calls use the intended E2B team.
  • Local defaults can also come from .env.local or ~/.e2b/config.json.
  • In Stripe Projects checkouts, the E2B CLI may not be globally logged in. Before using e2b sandbox ..., prefer a Stripe Projects env pull plus per-command export instead of trying e2b auth login.
  • Do not print secret values. stripe projects env --json can return redacted placeholders, so do not use it as the source for a runnable E2B_API_KEY. Pull the managed env file, then read only the needed E2B variables into the command environment without echoing them.
stripe projects env --pull --yes
env_value() {
  awk -F= -v key="$1" '$1 == key {sub(/^[^=]*=/, ""); gsub(/^"|"$/, ""); print; exit}' .env
}
export E2B_API_KEY="$(env_value E2B_API_KEY)"
export E2B_API_URL="$(env_value E2B_API_URL)"
export E2B_DOMAIN="$(env_value E2B_DOMAIN)"
e2b sandbox create base --detach

Stripe Projects CLI

Add E2B to the current Stripe project:

stripe projects add e2b/sandboxes

Inspect or pull provisioned credentials:

stripe projects env
stripe projects env --json
stripe projects env --pull --yes

Export the E2B API key before using the E2B CLI or SDK. Prefer stripe projects env --pull --yes for command execution because JSON output may redact secret values. Read only the variables you need from .env; do not source .env as shell code:

stripe projects env --pull --yes
env_value() {
  awk -F= -v key="$1" '$1 == key {sub(/^[^=]*=/, ""); gsub(/^"|"$/, ""); print; exit}' .env
}
export E2B_API_KEY="$(env_value E2B_API_KEY)"
export E2B_API_URL="$(env_value E2B_API_URL)"
export E2B_DOMAIN="$(env_value E2B_DOMAIN)"

Read the full file on GitHub · 171 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 171 lines · 51 tokens per session scan A 0f964fcb8528

Subscribe to this mod's changes

stripe-projects is a skill published in the GitHub repository e2b-dev/E2B (13,592 stars, last pushed 3d ago), licensed Apache-2.0. It adds 51 tokens to every session and 1,424 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

frontend-code-review

Use only when the user explicitly requests a review or audit of frontend code under web/ or packages/dify-ui/. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review intent, or backend-only code.

langgenius/dify · 62 tokens

backend-code-review

Use only when the user explicitly requests a review or audit of backend code under api/. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review intent, frontend code, or backend code outside api/.

langgenius/dify · 60 tokens

how-to-write-component

Use when implementing or refactoring React/TypeScript components and the task requires decisions about component ownership, feature boundaries, state, data flow, effects, or interaction ownership. Do not use for review-only requests, test-only work, copy-only edits, or styling-only changes.

langgenius/dify · 60 tokens

e2e-cucumber-playwright

Use when writing, changing, or reviewing Cucumber and Playwright tests under e2e/, including feature files, step definitions, support code, scenario tags, locators, and assertions. Do not use for Vitest, React Testing Library, backend tests, or generic browser automation outside the E2E suite.

langgenius/dify · 73 tokens

frontend-testing

Use when writing or changing Vitest or React Testing Library tests under web/ or packages/dify-ui/, or when the user explicitly requests frontend test strategy, including evaluation of an existing strategy. Do not use for frontend code-review-only requests, general testability discussion, Python tests, or…

langgenius/dify · 73 tokens

e2e-summary-skill

Summarize user input for Agent Builder E2E coverage.

langgenius/dify · 20 tokens