💳 Stripe Webhook & Checkout Doctor

What it does

Stripe Webhook Checkout Doctor is a specialized diagnostic engine for debugging and auditing Stripe payment integrations. It identifies critical vulnerabilities and logic errors in Stripe Checkout sessions, Billing Portal configurations, and webhook handlers. By analyzing your code, logs, and environment configurations, it provides evidence-backed reports on payment safety and lifecycle management.

How it works

The skill uses a multi-step diagnostic workflow: it runs a local heuristic scanner on your repository, cross-references your implementation against a comprehensive audit checklist, and identifies discrepancies in webhook signature verification, idempotency, and subscription state handling. Unlike generic AI prompts, this tool cites exact evidence from your source code and logs to justify its findings.

Supported Tools & Frameworks

• Frameworks: Next.js, Express, FastAPI, and generic serverless environments.
• Languages: Node.js, Python, and TypeScript.
• Stripe Features: Checkout (One-time & Subscriptions), Billing Portal, and Webhooks.
• Development: Integrates with Stripe CLI logs for real-time debugging.

Why use this skill

Debugging payments is high-stakes; a missed webhook or an insecure signature check can lead to lost revenue or unauthorized access. This skill automates the rigorous 'manual review' process, identifying edge cases like trial-to-subscription transitions and refund handling that developers often overlook. You get formatted remediation snippets and clear verification steps ready for implementation.