CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

upgrade-stripe

Guide for upgrading Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKs

65

1.08x
Quality

75%

Does it follow best practices?

Impact

100%

1.08x

1 of 3 eval scenarios. Add 2 more for a full score.

SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./providers/cursor/plugin/skills/upgrade-stripe/SKILL.md

The canonical home for this skill is upgrade-stripe in stripe/ai

SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable upgrade guide with a real checklist, validation checkpoints, and thoughtful honesty about stale fallback versions. The main costs are token efficiency — generic semver exposition, a good/avoid best-practice block, and dated version literals embedded in every code example — and a couple of detail sections that would be better split into reference files.

Suggestions

Remove the generic MAJOR.MINOR.PATCH explanation and the 'Good/Avoid' best-practice block; a single sentence stating the rule suffices.

Replace the hardcoded '2026-09-30.endive' in code examples with a placeholder (e.g. 'TARGET_API_VERSION') — the body already instructs readers to substitute the selected target, so the literal values add staleness risk for no benefit.

Split the dense checklist step 6 into sub-steps (or move webhook-destination replacement detail to a reference file) so the cutover sequence with its dual-secret validation is scannable.

DimensionReasoningScore

Conciseness

The body is mostly lean and actionable, but it includes unnecessary explanation Claude already knows (the generic MAJOR.MINOR.PATCH semantic-versioning breakdown, the good/avoid 'Best Practice' block) and hardcodes the dated version '2026-09-30.endive' in nearly every code example — time-sensitive values that the guidelines penalize outside a deprecated/old-patterns section, even though the fallback-version note itself is refreshingly candid about staleness.

3 / 5

Actionability

Executable snippets in Python, Ruby, JavaScript, and bash (the curl 'Stripe-Version' test call), a concrete 9-step upgrade checklist, and specific commands like 'npm update stripe', 'pip install --upgrade stripe' make this mostly copy-paste ready — matching anchor 4; minor gaps remain, e.g. the Java/Go/.NET path only says 'update the SDK to target a new API version' with no concrete command.

4 / 5

Workflow Clarity

The upgrade checklist gives a clear sequence with most checkpoints present — test via the 'Stripe-Version' header before changing defaults, accept both signing secrets during cutover, disable the old destination, and a 72-hour rollback window — matching anchor 4. It falls short of anchor 5 because the procedure is split across sections and checklist step 6 compresses a multi-step destination-replacement workflow into one dense run-on item with implicit sub-sequencing.

4 / 5

Progressive Disclosure

Sections are well-organized with clearly signaled external links ('See [Set a Stripe API version for your SDK]...for details'), and there are no bundle files, so structure is judged on the inline organization — matching anchor 4's 'good structure; most content is appropriately placed; references mostly clear'. The Stripe.js and Mobile SDK sections are self-contained detail blocks inlined in a ~190-line SKILL.md that could live in reference files, a minor organization gap that keeps it below anchor 5.

4 / 5

Total

15

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, highly specific, Stripe-distinct description that clearly communicates what the skill covers across all upgrade surfaces. Its main weakness is the absence of any 'Use when...' trigger clause, which caps completeness and leaves invocation guidance implicit.

Suggestions

Add an explicit trigger clause, e.g. 'Use when the user mentions upgrading, migrating, or bumping their Stripe integration, API version, webhooks, or SDKs.'

Include natural synonyms and variations users might say — 'migrate', 'update', 'bump version', 'Stripe integration' — to broaden trigger coverage.

Mention selecting or verifying a target API version as a concrete action to round out capability coverage.

DimensionReasoningScore

Specificity

The description names one concrete action ('upgrading') applied across five specific surfaces ('Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKs'), giving broad coverage of the upgrade surface — above anchor 3's '1-2 concrete actions', but below anchor 5 because it lists a single action verb rather than multiple distinct concrete actions (no selecting a target, testing, or migrating).

4 / 5

Completeness

It clearly answers 'what does this do' (a guide for upgrading the full range of Stripe surfaces) but contains no 'Use when...' clause or equivalent explicit trigger guidance, which per the judging guidelines caps completeness at 3 — matching anchor 3's 'clear what but when is missing or only weakly implied'.

3 / 5

Trigger Term Quality

Terms like 'upgrade', 'Stripe', 'API versions', 'webhook endpoints', and 'SDKs' are natural phrases users would say, matching anchor 4's 'good keyword coverage; a few natural terms missing' — synonyms such as 'migrate', 'update', or 'bump the Stripe version' are absent, keeping it below anchor 5.

4 / 5

Distinctiveness Conflict Risk

The description is explicitly and entirely Stripe-specific ('Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKs'), giving it a clear niche with distinct triggers and minimal conflict risk with any non-Stripe skill, matching anchor 5.

5 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

stripe/ai

Path

providers/cursor/plugin/skills/upgrade-stripe/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.