stripe-integration-review
Reviews Stripe integration code for correctness -- idempotency, error handling, API version pinning, webhook signature checks, and race conditions. Use when the user asks to "review Stripe code", "audit our Stripe integration", or mentions integration bugs, double-charging, or race conditions. For security specifically, see stripe-security-audit.
소스 정보
- 저장소
- appeeky/stripe-skills
- 최근 소스 활동
- 2026년 7월 19일 10:10
- 감지된 SKILL.md 언어
- 영어
- 스타
- 5
- 포크
- 1
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
SKILL.md 표시 중
SKILL.md
소스 지침 · 읽기 전용 미리보기- name
- stripe-integration-review
- description
- Reviews Stripe integration code for correctness -- idempotency, error handling, API version pinning, webhook signature checks, and race conditions. Use when the user asks to "review Stripe code", "audit our Stripe integration", or mentions integration bugs, double-charging, or race conditions. For security specifically, see stripe-security-audit.
- metadata
- {"version":"1.0.0"}
# Stripe Integration Review
Reviews the **codebase** (not just live data). Grep the repo for Stripe usage, then audit.
## Search targets
`new Stripe(`, `stripe.subscriptions`, `stripe.checkout`, `stripe.webhooks`, `apiVersion`, `idempotencyKey`.
## Review Checklist
| Area | Check |
|------|-------|
| API version | Pinned explicitly, not floating |
| Idempotency | `idempotencyKey` on create calls (retries safe) |
| Webhooks | Signature verified with `constructEvent` |
| Race conditions | Existing-subscription check before create (no double-bill) |
| Error handling | Stripe errors caught by type, user-friendly messages |
| Amounts | Cents, no float rounding bugs |
| Secrets | Key from env, never hardcoded |
| Proration | `proration_behavior` set intentionally on updates |
## Output Template
```
Integration Review
Critical:
- [file:line] -- [issue] -> [fix]
Improve:
- ...
Good:
- ...
Top fix: [highest-risk item]
```
Reference live behavior with MCP only to confirm suspicions (e.g. duplicate subs via `active-subscriptions-audit`).
GitHub에서 보기