stripe-integration
Facilitates Stripe integration for checkout flows, subscription management, and webhook handling to streamline payment processing.
Install this skill
Security score
The stripe-integration skill was audited on Mar 1, 2026 and we found 21 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 3 | description: Load when implementing Stripe checkout flows, subscription management, webhook handling, or payment processing. |
Webhook reference - potential data exfiltration
| 10 | - Handling Stripe webhooks |
Webhook reference - potential data exfiltration
| 49 | ## Webhook Handling (CRITICAL) |
Webhook reference - potential data exfiltration
| 51 | **40% of unprocessed payments come from missing/broken webhook handlers.** |
Webhook reference - potential data exfiltration
| 59 | WEBHOOK_SECRET = os.environ["STRIPE_WEBHOOK_SECRET"] |
Webhook reference - potential data exfiltration
| 61 | @router.post("/webhooks/stripe") |
Webhook reference - potential data exfiltration
| 62 | async def stripe_webhook(request: Request): |
Webhook reference - potential data exfiltration
| 68 | event = stripe.Webhook.construct_event(payload, sig, WEBHOOK_SECRET) |
Webhook reference - potential data exfiltration
| 117 | ### 3. 5-Second Webhook Timeout |
Webhook reference - potential data exfiltration
| 120 | @router.post("/webhook") |
Webhook reference - potential data exfiltration
| 121 | async def webhook(request: Request): |
Webhook reference - potential data exfiltration
| 128 | @router.post("/webhook") |
Webhook reference - potential data exfiltration
| 129 | async def webhook(request: Request): |
Webhook reference - potential data exfiltration
| 139 | 3. Wait for `payment_intent.succeeded` webhook |
Webhook reference - potential data exfiltration
| 152 | # Listen for webhooks locally |
Webhook reference - potential data exfiltration
| 153 | stripe listen --forward-to localhost:8080/webhooks/stripe |
Webhook reference - potential data exfiltration
| 167 | - [ ] Webhook signature verification enabled |
Webhook reference - potential data exfiltration
| 176 | - [Webhook Events](https://docs.stripe.com/webhooks) |
External URL reference
| 44 | success_url="https://example.com/success?session_id={CHECKOUT_SESSION_ID}", |
External URL reference
| 45 | cancel_url="https://example.com/cancel", |
External URL reference
| 178 | - [PCI Compliance](https://stripe.com/guides/pci-compliance) |
Install this skill with one command
/learn @telum-ai/stripe-integration