CtrlK
BlogDocsLog inGet started
Tessl Logo

stripe-integration

Master Stripe payment processing integration for robust, PCI-compliant payment flows including checkout, subscriptions, webhooks, and refunds.

48

Quality

51%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./plugins/antigravity-bundle-commerce-payments/skills/stripe-integration/SKILL.md

The canonical home for this skill is stripe-integration in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

50%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill provides solid, executable code examples covering the major Stripe integration patterns, which is its primary strength. However, it is significantly over-verbose with conceptual explanations Claude doesn't need, lacks a coherent end-to-end workflow with validation checkpoints for financial operations, and references bundle files that don't exist. The content would benefit greatly from trimming explanatory sections and restructuring around a clear sequential workflow.

Suggestions

Remove or drastically reduce the 'Core Concepts' section — Claude already knows what checkout sessions, webhooks, and subscriptions are. Keep only non-obvious details like specific event names.

Add an explicit end-to-end workflow with numbered steps and validation checkpoints, e.g.: 1. Create customer → 2. Create checkout session → 3. Handle webhook → 4. Verify payment status → 5. Fulfill order (only after verification).

Move the lengthy code patterns into actual bundle files (e.g., assets/stripe-client.py, references/checkout-flows.md) and keep only the Quick Start example inline, since the Resources section already references these files.

Consolidate 'Best Practices' and 'Common Pitfalls' into a single concise checklist — many items overlap (e.g., webhook verification appears in both).

DimensionReasoningScore

Conciseness

The skill is significantly verbose. The 'Core Concepts' section explains things Claude already knows (what a Product, Price, Subscription, and Invoice are; what checkout sessions vs payment intents are). The 'Common Pitfalls' and 'Best Practices' sections largely restate what's already shown in the code. The customer management descriptions are unnecessary padding. Overall, this could be cut by 40-50% without losing actionable content.

2 / 5

Actionability

The code examples are concrete, executable, and cover the major patterns (checkout, payment intents, subscriptions, webhooks, refunds, testing). Minor gaps include placeholder comments like '# Update your database' and '# Send confirmation email' without concrete guidance, and the manual webhook signature verification function has a bug (uses `hmac.new` instead of `hmac.new` with proper Stripe signature format). The frontend JS is in a docstring rather than a proper code block.

4 / 5

Workflow Clarity

The patterns are presented as isolated code snippets rather than a sequenced workflow. There's no clear end-to-end flow showing the order of operations (create customer → create subscription → handle webhook → verify). The webhook section includes idempotency handling which is good, but there are no explicit validation checkpoints or feedback loops for verifying that payments actually succeeded before fulfilling orders. For payment processing (a destructive/financial operation), the lack of validation steps caps this at 3.

3 / 5

Progressive Disclosure

The Resources section references multiple files (references/checkout-flows.md, assets/stripe-client.py, etc.) which is good structure, but none of these bundle files actually exist. The SKILL.md itself is a monolithic ~350-line document that inlines extensive code examples that could be split into referenced files. The reference to 'resources/implementation-playbook.md' in the Instructions section also doesn't exist in the bundle.

3 / 5

Total

12

/

20

Passed

Description

52%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies a clear domain (Stripe integration) with relevant subtopics but reads more like a course title than an actionable skill description. It lacks a 'Use when...' clause and uses imperative/instructional voice ('Master') rather than describing concrete actions the skill performs. The trigger terms are decent but the absence of explicit selection guidance limits its effectiveness in a multi-skill environment.

Suggestions

Add an explicit 'Use when...' clause with trigger phrases like 'Use when the user asks about Stripe integration, payment processing, billing setup, or handling charges and refunds'.

Replace the imperative 'Master' framing with concrete action verbs describing what the skill does, e.g., 'Implements Stripe checkout sessions, configures subscription billing, verifies webhook signatures, and processes refunds'.

Include additional trigger terms users might naturally say: 'billing', 'charges', 'invoices', 'payment intent', 'Stripe API', 'customer portal'.

DimensionReasoningScore

Specificity

Names the domain (Stripe payment processing) and lists several areas (checkout, subscriptions, webhooks, refunds), but these are categories rather than concrete actions. It doesn't describe what it actually does with these (e.g., 'creates checkout sessions', 'handles webhook verification').

3 / 5

Completeness

Has a somewhat clear 'what' (Stripe payment processing integration covering checkout, subscriptions, webhooks, refunds) but completely lacks a 'when' clause. There's no explicit guidance on when Claude should select this skill.

2 / 5

Trigger Term Quality

Includes good natural keywords like 'Stripe', 'payment processing', 'checkout', 'subscriptions', 'webhooks', 'refunds', and 'PCI-compliant'. Missing some variations users might say like 'billing', 'charges', 'invoices', 'payment intent', or 'Stripe API'.

4 / 5

Distinctiveness Conflict Risk

Fairly distinct due to the specific mention of 'Stripe' which narrows it to a particular payment provider. Could potentially overlap with a generic payments skill or a broader API integration skill, but the Stripe specificity reduces conflict risk significantly.

4 / 5

Total

13

/

20

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.