CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

stripe-best-practices

Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (Stripe Tax, automatic_tax, product tax codes), Treasury financial accounts, integration options (Checkout, Payment Element), migrating from deprecated Stripe APIs, and security best practices (API key management, API key permissions, webhooks, OAuth). Use when planning, building, modifying, testing, or reviewing any Stripe integration, including choosing a development environment, accepting payments, building marketplaces, integrating Stripe, processing payments, setting up subscriptions, collecting sales tax, VAT, or GST, creating connected accounts, or implementing secure key handling.

94

1.22x
Quality

94%

Does it follow best practices?

Impact

98%

1.22x

Average score across 3 eval scenarios

SecuritybySnyk

Low

Low-risk findings worth noting

The canonical home for this skill is stripe-best-practices in stripe/ai

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exemplary routing skill: a scenario-to-API table with per-domain reference files, hard rules with exact parameter names and deprecated patterns, and concrete CLI commands. The only weaknesses are a slightly padded rationale sentence, version tables that will go stale, and rule-list structure that leaves feedback loops to the reference files.

Suggestions

Conciseness: trim the dynamic-payment-methods rationale ('dynamically display the most relevant eligible payment methods to each customer to maximize conversion') to just the rule — omit payment_method_types, use payment_method_configurations or excluded_payment_method_types — since the Dashboard-behavior explanation is not needed to follow it.

Conciseness: move the 'Latest SDK versions' table and pinned API version ('2026-09-30.endive') into a clearly labeled versions/deprecations reference (or the per-domain references) so stale version data is quarantined and the body stays evergreen.

Workflow clarity: state the verification loop inline for the riskiest rules, e.g. after 'confirm the user has an active registration', add the follow-up check (run a test Tax Calculation and check taxability_reason) rather than deferring it entirely to references/tax.md.

DimensionReasoningScore

Conciseness

The body is largely lean and restricted to Stripe-specific facts Claude cannot know (latest API version, sandbox vs test-mode rules, exact parameter names), but two things could be trimmed or would rot: the conversion rationale 'dynamically display the most relevant eligible payment methods to each customer to maximize conversion', and time-sensitive version data ('2026-09-30.endive', the 7-row SDK version table) that is not placed in a deprecated/old-patterns section. Not 3, because there is no explanation of concepts Claude already knows and nearly every line is an imperative rule.

4 / 5

Actionability

Fully executable guidance throughout: copy-paste commands ('npm i -g @stripe/cli', 'stripe sandbox create', 'stripe whoami --format json'), exact parameter rules ('Never include payment_method_types… use allowed_payment_method_types'), named deprecated patterns ('stripe.api_key = …', 'Stripe.setApiKey'), and a routing table mapping every common scenario to a specific API and reference file. Not 4, because no common case is left without concrete instruction.

5 / 5

Workflow Clarity

The sequence is clear — classify the task via the routing table, then 'Read the relevant reference file before answering any integration question or writing code', then apply the critical rules — and pre-flight checkpoints are present ('confirm the user has an active registration', 'first make sure stripe sandbox claim is run'). Not 5, because the body presents rules as a list rather than an ordered workflow with explicit validate/fix/retry feedback loops (verification detail is deferred to the reference files); not 3, because ordering and preconditions are explicit and stated.

4 / 5

Progressive Disclosure

A true overview that keeps only defaults, a routing table, and critical rules in SKILL.md, pushing domain detail to six real, well-signaled, one-level-deep reference files (references/payments.md, connect.md, billing.md, tax.md, treasury.md, security.md — all present in the bundle, none nesting further pointers). The 'Building… | Recommended API | Details' table makes navigation unambiguous; not 4, since there are no organization gaps to point to.

5 / 5

Total

18

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A model description: third-person voice, dense with named APIs and parameters rather than fluff, an explicit 'Use when' clause with natural trigger phrases and synonyms, and a distinct Stripe-only niche. It is on the long side (~950 chars) but every clause carries specifics rather than padding.

DimensionReasoningScore

Specificity

Enumerates concrete, named capabilities — 'API selection (Checkout Sessions vs PaymentIntents)', 'Connect platform setup (Accounts v2, controller properties)', 'product tax codes', 'webhooks, OAuth' — covering the full Stripe surface with no vague padding. Matches the 'multiple specific concrete actions; comprehensive coverage' anchor and exceeds the 4 anchor, which requires coverage gaps.

5 / 5

Completeness

Explicitly answers both what ('Guides Stripe integration decisions across development and test environment planning… Treasury financial accounts… security best practices') and when ('Use when planning, building, modifying, testing, or reviewing any Stripe integration') with concrete trigger phrases — the exact pattern of the 5 anchor. Not 4, because the 'when' clause is already fully explicit and specific.

5 / 5

Trigger Term Quality

The 'Use when' clause covers the natural phrases users actually say, with synonyms: 'accepting payments', 'processing payments', 'setting up subscriptions', 'collecting sales tax, VAT, or GST', 'building marketplaces', 'creating connected accounts', 'implementing secure key handling'. Comprehensive keyword coverage; nothing common is missing.

5 / 5

Distinctiveness Conflict Risk

Clear niche with Stripe-specific triggers (Checkout Sessions, PaymentIntents, Accounts v2, automatic_tax, connected accounts) that no other skill domain would match. Minimal conflict risk; not 4, since even closely related skills (e.g. a generic payments skill) are distinguished by the Stripe-only terminology.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

stripe/ai

Path

providers/cursor/plugin/skills/stripe-best-practices/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.