stripe-integration
Facilitates seamless integration of Stripe payment processing for secure and compliant payment flows, subscriptions, and customer management.
Install this skill
Security score
The stripe-integration skill was audited on Mar 8, 2026 and we found 23 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 181 | checkoutContainer.append(`Total: ${session.total.total.amount}`); |
Webhook reference - potential data exfiltration
| 3 | description: Implement Stripe payment processing for robust, PCI-compliant payment flows including checkout, subscriptions, and webhooks. Use when integrating Stripe payments, building subscription sy |
Webhook reference - potential data exfiltration
| 8 | Master Stripe payment processing integration for robust, PCI-compliant payment flows including checkout, subscriptions, webhooks, and refunds. |
Webhook reference - potential data exfiltration
| 46 | ### 2. Webhooks |
Webhook reference - potential data exfiltration
| 282 | ## Webhook Handling |
Webhook reference - potential data exfiltration
| 284 | ### Secure Webhook Endpoint |
Webhook reference - potential data exfiltration
| 294 | @app.route('/webhook', methods=['POST']) |
Webhook reference - potential data exfiltration
| 295 | def webhook(): |
Webhook reference - potential data exfiltration
| 300 | event = stripe.Webhook.construct_event( |
Webhook reference - potential data exfiltration
| 349 | ### Webhook Best Practices |
Webhook reference - potential data exfiltration
| 355 | def verify_webhook_signature(payload, signature, secret): |
Webhook reference - potential data exfiltration
| 356 | """Manually verify webhook signature.""" |
Webhook reference - potential data exfiltration
| 365 | def handle_webhook_idempotently(event_id, handler): |
Webhook reference - potential data exfiltration
| 366 | """Ensure webhook is processed exactly once.""" |
Webhook reference - potential data exfiltration
| 377 | # Stripe will retry failed webhooks |
External URL reference
| 96 | success_url='https://yourdomain.com/success?session_id={CHECKOUT_SESSION_ID}', |
External URL reference
| 97 | cancel_url='https://yourdomain.com/cancel' |
External URL reference
| 118 | 'images': ['https://example.com/product.jpg'], |
External URL reference
| 125 | success_url='https://yourdomain.com/success?session_id={CHECKOUT_SESSION_ID}', |
External URL reference
| 126 | cancel_url='https://yourdomain.com/cancel', |
External URL reference
| 155 | return_url='https://yourdomain.com/complete?session_id={CHECKOUT_SESSION_ID}' |
External URL reference
| 237 | return_url: "https://yourdomain.com/complete", |
External URL reference
| 277 | return_url='https://yourdomain.com/account', |
Install this skill with one command
/learn @wshobson/stripe-integration