CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

testland/stripe-test-cards-and-webhooks

Use whenever code that takes payments with Stripe needs tests: test-mode keys, test cards for success, declines and 3D Secure, stripe listen to forward webhooks locally, stripe trigger fixtures, and Stripe-Signature verification.

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Solid, actionable content: concrete executable examples, a useful anti-patterns table, and honest limitations, all in a well-organized single file. Main improvement areas are tightening small redundancies, making the placeholder-bearing examples fully copy-paste ready, and adding an explicit validation checkpoint for local webhook forwarding.

Suggestions

Replace the `{...}` placeholders in the webhook handler test payload and the idempotency test with complete, runnable literals so every example is copy-paste ready.

De-duplicate the "Per docs.stripe.com/testing" citations and the References section, which repeats links already cited inline, to save tokens.

Add an explicit validation checkpoint in the Running section (e.g., confirm `stripe listen` prints the forwarding URL and a test event is received before running `npm test`), and consider moving the CI config and full test-card matrix into one-level-deep reference files.

DimensionReasoningScore

Conciseness

The body is dense and table-driven with no padding explaining what Stripe is, but minor redundancy could be trimmed — "Per docs.stripe.com/testing" is cited twice and the References section repeats links already cited inline. It is not a 5 because those repetitions cost tokens without adding information, and not a 3 because there is no unnecessary conceptual explanation.

4 / 5

Actionability

Mostly executable guidance: install commands, SDK init, runnable PaymentIntent tests, a webhook handler test, CLI commands, and CI YAML. It falls short of fully copy-paste ready because the webhook test payload uses "data: {...}" and both idempotency create calls use "{...}" placeholders — minor gaps rather than the pseudocode-heavy pattern of the 3-anchor.

4 / 5

Workflow Clarity

The authoring path is clearly sequenced (Install → Initialize → test cards → tests → webhooks → Running → CI) and the tests themselves serve as checkpoints; no destructive or batch operation applies the cap-of-3 rule. It is not a 5 because explicit validation checkpoints and error-recovery loops are absent, e.g., verifying that `stripe listen` is actually forwarding before running webhook tests.

4 / 5

Progressive Disclosure

No bundle files exist, and the single file is well-sectioned with clear headers and a clearly signaled References section of external links; core content (card table, anti-patterns) is appropriately inline. It is not a 5 because at ~200 lines some material (the CI config and the full test-card matrix) could be split into one-level-deep reference files, leaving SKILL.md a leaner overview.

4 / 5

Total

16

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it explicitly states both when to use the skill and what it covers, with concrete Stripe-specific capabilities and natural trigger terms. The only weaknesses are a few missing natural synonyms and slight overlap risk with sibling payment-testing skills.

DimensionReasoningScore

Specificity

Enumerates multiple concrete capabilities — "test-mode keys", "test cards for success, declines and 3D Secure", "stripe listen to forward webhooks locally", "stripe trigger fixtures", and "Stripe-Signature verification" — matching the comprehensive-coverage anchor; unlike the 4-anchor there is no meaningful capability gap for this skill's scope.

5 / 5

Completeness

"Use whenever code that takes payments with Stripe needs tests" is an explicit when-clause with concrete trigger phrasing, and the colon-separated list explicitly states what the skill covers — both what and when are clearly answered. It is not a 4 because the when-clause is already specific and concretely phrased, not merely present.

5 / 5

Trigger Term Quality

Natural terms users would say are present ("Stripe", "payments", "test cards", "webhooks", "3D Secure", "stripe listen", "stripe trigger"), but a few common synonyms are missing (e.g., "billing", "checkout", "sandbox"), which matches the good-coverage-with-minor-gaps anchor rather than the comprehensive-synonyms anchor.

4 / 5

Distinctiveness Conflict Risk

The description carves a clear Stripe-specific niche with distinct triggers, but companion payment-testing skills referenced in the body (payment-flow-test-author, payment-gateway-sandboxes) share the payments-testing trigger space, creating minor overlap risk — the mostly-distinct anchor rather than minimal-conflict.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

On this page