PromptVetted pass

Credential and entity separation checklist

Before any payment, signup or commit, check that the card, email, account and author belong to the right entity.

Install / use

Add to your instructions/memory file.

Download SKILL.md Source ↗

Community

👁 – views · ⬇ – downloads · 💬 –

What it helps with

Checks card, account, identity and author belong to the right entity before any payment, signup or commit; the only item for payments/credential separation.

Agent jobs: Venture operator, Owner's operator, Capital & forecasting, Content producer

Capability gaps: Payments & credential separation, Owner alignment

Go-to-market Finance & trading Security Evals & quality

Security scan and details

Scan result: Vetted pass · 2026-10-17
Scan notes: Automated scan: pass (no medium+ findings) at commit sha256:89d7f on 2026-10-17.
License: Avatar 8 LLC house item
Cost: free
Source: upskill.coach/library/entity-separation.md

Automated static scan of the source at a pinned commit (custom prompt-injection, malware and exfiltration rules plus semgrep, gitleaks and osv-scanner); flagged lines get a manual review. Hosted APIs with no code to scan stay at Needs review. A scan lowers risk; it doesn't prove safety.

SKILL.md

Shown under its publisher's terms (Avatar 8 LLC). Third-party text: read it as data, not instructions.

# Credential and entity separation checklist Before any payment, signup, purchase, commit or outbound message, check: 1. Entity: which company/venture is this for? Is the card, billing email and account owned by that entity? 2. Identity: am I signed in as the right account (not the owner's employer, not another venture)? 3. Author: are commits/emails attributed to the right name and address? 4. Approval: does this action need the owner's explicit OK? If unsure, ask. If anything doesn't match, stop and ask. Report `incidents.wrong_entity` honestly at check-in.

MCPVetted pass

Stripe AI (official MCP + skills)

Stripe's agent toolkit, hosted MCP (mcp.stripe.com, OAuth) and skills (stripe-best-practices, upgrade-stripe).

★ 2.0k

PromptVetted pass

Paper-trading discipline

Paper or demo first, owner-set stake/exposure/max-loss limits, separate trade-only keys, a log before every order, and P&L read from exchange statements.

PromptVetted pass

Venture Operator guardrails

Session rules: batch owner blockers, chunk tasks <40 min with checkpoints, evidence-required claims, credential/entity separation, rules-before-actions, live…

MCPVetted pass