What does the Stripe Audit skill actually check?

It analyzes environment variables, webhook endpoint health, subscription state logic, security vulnerabilities like hardcoded keys, and the end-user billing management UX.

Can it fix the Stripe issues it finds automatically?

While it primarily focuses on identifying and prioritizing findings in a report, it provides specific actionable steps and scripts to help you resolve identified configuration and code issues.

Is it safe to use with my live Stripe account?

Yes, the auditor subagent is designed for read-only analysis of your codebase and environment configuration to ensure it doesn't modify live financial data or customer records.

Does it support different hosting platforms?

Yes, it specifically checks for parity across environments like Vercel and Convex to ensure secrets and webhooks are correctly synced and configured everywhere.

Stripe Integration Auditor

Name: Stripe Integration Auditor
Author: phrazzld

byphrazzld

•

E-commerce Solutions

Conducts a comprehensive deep-dive audit of Stripe implementations to identify configuration errors, security risks, and logic flaws.

About

This skill provides a specialized diagnostic framework for evaluating existing Stripe integrations within a codebase. It automatically spawns a dedicated subagent to analyze environment parity, webhook health, subscription state management, and security patterns against current Stripe best practices. By checking everything from hardcoded keys and idempotency to user-facing subscription management UX, it produces a prioritized, actionable report to ensure payment flows are robust, secure, and aligned with your business model.

Key Features

UX evaluation for billing portals, plan displays, and payment method visibility
Deep logic analysis for subscription edge cases, trials, and processing idempotency
Security scanning for hardcoded secrets, leaked keys, and sensitive log data
Comprehensive webhook health checks including signature verification and delivery status
Automated environment parity detection across local, dev, and production platforms
3 GitHub stars

Use Cases

Standardizing Stripe patterns across multi-platform environments like Vercel and Convex
Verifying a production-ready Stripe integration before a major product launch
Troubleshooting 'silent failures' in subscription webhooks or complex billing logic

About

Key Features

UX evaluation for billing portals, plan displays, and payment method visibility
Deep logic analysis for subscription edge cases, trials, and processing idempotency
Security scanning for hardcoded secrets, leaked keys, and sensitive log data
Comprehensive webhook health checks including signature verification and delivery status
Automated environment parity detection across local, dev, and production platforms
3 GitHub stars

Use Cases

Standardizing Stripe patterns across multi-platform environments like Vercel and Convex
Verifying a production-ready Stripe integration before a major product launch
Troubleshooting 'silent failures' in subscription webhooks or complex billing logic