CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

payment-integration

Integrate Stripe, PayPal, and payment processors. Handles checkout flows, subscriptions, webhooks, and PCI compliance. Use PROACTIVELY when implementing payments, billing, or subscription features.

Quality

77%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/payment-integration/SKILL.md

The canonical home for this skill is payment-integration in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-organized and dense with genuinely useful payment-security guidance (webhook idempotency, PCI tokenization, environment separation), but it contains no executable code, presents principles rather than a validated workflow, and points to a playbook file that is missing from the bundle. It reads as a solid requirements checklist rather than an operational skill.

Suggestions

Add executable code examples for the critical requirements — e.g., a Stripe webhook signature-verification snippet and an idempotent event-handler skeleton in a named language — so the guidance is copy-paste ready instead of directive-only.

Restructure "Approach" into a sequenced workflow with explicit validation checkpoints (e.g., verify test-mode payments end-to-end, confirm webhook delivery and idempotency behavior, then migrate credentials to production) so each step has a pass/fail gate.

Fix the dangling reference: either create `resources/implementation-playbook.md` with the promised detailed examples (conventionally under `references/`) or remove the pointer; also consider trimming the boilerplate "Instructions" and use/do-not-use sections to improve token efficiency.

DimensionReasoningScore

Conciseness

The core sections are lean, high-value directives with no explanations of concepts Claude already knows, but there is trimmable filler: the boilerplate "Instructions" bullets ("Clarify goals, constraints, and required inputs", "Apply relevant best practices and validate outcomes"), the generic use/do-not-use sections, and the persona line "You are a payment integration specialist...".

4 / 5

Actionability

Directives are specific ("Return `2xx` status within 200ms", "Store event IDs in your database", "Use tokenization APIs (Stripe Elements, PayPal SDK)"), but there is no executable code or commands anywhere — for a skill about writing payment integration code, guidance stops at the requirements level, matching 'some concrete guidance but incomplete; missing key details' rather than 'mostly executable guidance'.

3 / 5

Workflow Clarity

The "Approach" section lists a rough sequence ("Security first", "Implement idempotency", "Test mode first, with clear migration path to production"), but it reads as a principles list rather than an operational workflow, and validation appears only implicitly ("Test payment scenarios and edge cases" as an output, not a checkpoint) — matching the anchor 'steps listed but validation gaps; checkpoints missing or implicit'.

3 / 5

Progressive Disclosure

Sections are well-organized and the body offloads detail via a clearly signaled one-level reference ("If detailed examples are required, open `resources/implementation-playbook.md`"), but that referenced file does not exist in the bundle (no resources/ or references/ directory is present), so the navigation path is broken — scoring against the actual bundle structure drops it below the 'good structure' anchor.

3 / 5

Total

13

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it names concrete providers and capability areas, uses third-person voice, and includes an explicit, natural 'Use PROACTIVELY when...' trigger clause. The only weakness is minor coverage gaps (e.g., refunds, disputes, payment-gateway synonyms).

DimensionReasoningScore

Specificity

"Integrate Stripe, PayPal, and payment processors" and "Handles checkout flows, subscriptions, webhooks, and PCI compliance" list several concrete, named capabilities, matching the 'several specific actions; minor gaps' anchor rather than the comprehensive anchor because areas like refunds, disputes, and error handling are not mentioned.

4 / 5

Completeness

The 'what' is explicit ("Handles checkout flows, subscriptions, webhooks, and PCI compliance") and the 'when' is an explicit concrete trigger clause ("Use PROACTIVELY when implementing payments, billing, or subscription features"), matching the anchor that clearly answers both with concrete trigger phrases; it is not the 4 anchor because the when-guidance is already explicit and specific.

5 / 5

Trigger Term Quality

Natural terms users would say are present ("payments", "billing", "subscription", "Stripe", "PayPal", "checkout", "webhooks"), giving good keyword coverage; a few common variations like "payment processing", "invoicing", or "payment gateway" are missing, so it falls just short of the comprehensive-synonyms anchor.

4 / 5

Distinctiveness Conflict Risk

The description carves out a clear niche ("Stripe, PayPal, and payment processors" with "checkout flows, subscriptions, webhooks, and PCI compliance") that would rarely trigger for an unrelated skill, matching the 'clear niche with distinct triggers; minimal conflict risk' anchor.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills-claude/skills/payment-integration/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.