Agent skill

Payments Webhooks

by WrongStack in WrongStack/WrongStack

Implement payment-provider integration and reliable authenticated webhook processing for an owned application.

MITAuto-check passedBackend & APIs

Install Payments Webhooks

skills CLI
$ npx skills add WrongStack/WrongStack --skill payments-webhooks -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install WrongStack/WrongStack payments-webhooks --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/WrongStack/WrongStack.git skills-src && mkdir -p .claude/skills && cp -r skills-src/packages/core/skills/payments-webhooks .claude/skills/payments-webhooks && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
payments-webhooks
GitHub stars
371
Token cost
~850 tokens
SKILL.md length
295 words
Files
1
Skills in repo
100
Repo updated
First seen
Licence
MIT

At a glance

Implement payment-provider integration and reliable authenticated webhook processing for an owned application.

  • Works in 6 steps: Model money/currency, order/payment… → Verify webhook authenticity against the… → Deduplicate events atomically and handle… → …
  • Building checkout
  • SKILL.md covers Selection card, Overview, Rules and Workflow, plus 3 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Payments Webhooks is an agent skill from WrongStack/WrongStack. Implement payment-provider integration and reliable authenticated webhook processing for an owned application. Use when building checkout, subscriptions or billing reconciliation; separate payment events, entitlement state and provider verification.

Its SKILL.md is about 850 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs, covering Webhooks and Accounting and bookkeeping. It works with Stripe. The repository describes itself as: An AI coding agent that reads your code, edits files, runs commands, and reasons through bugs — across a terminal REPL, a full-screen TUI, and a browser UI, while you keep your… The licence is MIT.

When your agent uses it

  • Building checkout
  • Billing reconciliation
  • Separate payment events
  • Entitlement state and provider verification

Example prompts

  • “/payments-webhooks”

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Model money/currency, order/payment identity and entitlement transitions explicitly.
  2. Verify webhook authenticity against the raw payload and supported SDK; parsed/re-serialized bodies can invalidate verification.
  3. Deduplicate events atomically and handle out-of-order/retried delivery; event id and business operation id solve different duplication…
  4. Use idempotency for outbound payment mutations and reconcile ambiguous timeout-after-commit outcomes.
  5. Treat browser redirect success as UX feedback, not authoritative payment or entitlement proof.
  6. Use provider sandbox fixtures and authorized test accounts; skill activation does not authorize a real charge/refund.

What it can do on your machine

Read from SKILL.md and the folder at commit a744bdc. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • docs.stripe.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Payments Webhooks loads about 850 tokens when it runs. Until then it costs about 67 tokens; SKILL.md has 295 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~67
When it runs · the whole SKILL.md, loaded when a task matches
~850

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from WrongStack/WrongStack at commit a744bdc, republished under its MIT licence (© WrongStack). 295 words, ~850 tokens.

Download SKILL.mdSave it as .claude/skills/payments-webhooks/SKILL.md (or your agent's skills folder).
name
payments-webhooks
description
Implement payment-provider integration and reliable authenticated webhook processing for an owned application. Use when building checkout, subscriptions or billing reconciliation; separate payment events, entitlement state and provider verification.
trigger
Implement payment-provider integration and reliable authenticated webhook processing for an owned application. Use when building checkout, subscriptions or…
version
1.0.1
required-capabilities
filesystem.read
optional-capabilities
filesystem.write, execution.shell, verification.run, web.research
metadata.routing-group
backend
metadata.domain
product

Payments Webhooks

Selection card

  • Task: Implement signed, idempotent payment callbacks. / TR: İmzalı, idempotent ödeme callback uygula.
  • Start: Locate the endpoint, schema, authentication boundary and caller.
  • Finish: apply the acceptance checks below; report observed results and unresolved constraints.

Overview

Implement payment-provider integration and reliable authenticated webhook processing for an owned application.

Checked Stripe Node SDK target: 23.0.0 on 2026-10-09. Provider API version is a separate contract; inspect account/API compatibility and official migration notes before upgrades.

Rules

  1. Model money/currency, order/payment identity and entitlement transitions explicitly.
  2. Verify webhook authenticity against the raw payload and supported SDK; parsed/re-serialized bodies can invalidate verification.
  3. Deduplicate events atomically and handle out-of-order/retried delivery; event id and business operation id solve different duplication problems.
  4. Use idempotency for outbound payment mutations and reconcile ambiguous timeout-after-commit outcomes.
  5. Treat browser redirect success as UX feedback, not authoritative payment or entitlement proof.
  6. Use provider sandbox fixtures and authorized test accounts; skill activation does not authorize a real charge/refund.

Workflow

  1. Inspect current billing models, provider SDK/API version and event handling.
  2. Specify state transitions and reconciliation rules.
  3. Implement verified inbound events and atomic application mutations.
  4. Test invalid signatures, replay, ordering, partial failure and ambiguous retries using local/sandbox inputs.
  5. Verify checkout/entitlement experience and report sandbox versus live evidence separately.

Before returning

Provider authenticity and account/API scope explicit; replay/order/idempotency covered; entitlements reconcile; real financial actions remain authorized.

Sources

Versioned facts checked 2026-10-09; refresh authoritative sources before new installs/upgrades. Stripe webhooks, Stripe idempotency.

Skills in scope

  • api-design — api design contracts and verification.
  • database-migrations — design and verify schema migrations, bounded backfills and deployment compatibility for databases.
  • queues-jobs — implement reliable asynchronous jobs and message consumers with explicit delivery, retry and shutdown semantics.
  • authentication-sessions — implement application sign-in, sessions and identity integration with explicit account/tenant authorization.

© WrongStack, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in packages/core/skills/payments-webhooks of WrongStack/WrongStack.

Open the folder on GitHubat commit a744bdc

Compare with similar skills

Payments Webhooks next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Payments Webhooks compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Payments Webhooks this skillWrongStack/WrongStack371—~850Automated safety check: PassMIT
Stripe Appsfossasia/eventyay1.7k1 repos~3.6kAutomated safety check: PassApache-2.0
Stripe Best Practiceskanchengw/cnllm1732 repos~925Automated safety check: PassApache-2.0
Cashier Stripe Developmentluadotsh/lua3431 repos~1.2kAutomated safety check: PassMIT
Stripe Best Practicesfossasia/eventyay1.7k1 repos~1.7kAutomated safety check: PassApache-2.0
Stripe Integrationwshobson/agents40k10 repos~1kAutomated safety check: PassMIT

Similar skills

  • Stripe Apps

    fossasia/eventyay

    A skill your agent uses when building, modifying, or reviewing a Stripe App — or when the user describes something that implies one (e.g.

    1.7k GitHub starsUsed in 1 repo~3.6k tokens
    Backend & APIsAuto-check passed
  • Stripe Best Practices

    kanchengw/cnllm

    Guides Stripe integration decisions — API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, Treasury financial…

    173 GitHub starsUsed in 2 repos~925 tokens
    Backend & APIsAuto-check passed
  • Handles Laravel Cashier Stripe integration including subscriptions, webhooks, Stripe Checkout, invoices, charges, refunds, trials, coupons, metered billing, and payment failure handling.

    343 GitHub starsUsed in 1 repo~1.2k tokens
    Backend & APIsAuto-check passed
  • Stripe Best Practices

    fossasia/eventyay

    Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents)…

    1.7k GitHub starsUsed in 1 repo~1.7k tokens
    Backend & APIsAuto-check passed
  • Stripe Integration

    wshobson/agents

    Implement Stripe payment processing for robust, PCI-compliant payment flows including checkout, subscriptions, and webhooks.

    40k GitHub starsUsed in 10 repos~1k tokens
    Backend & APIsAuto-check passed
  • Convex HTTP Actions

    waynesutton/builder-skills

    Adds HTTP endpoints in convex/http.ts: webhook receivers with signature checks, REST style routes, CORS, auth headers, streaming responses, and file uploads over HTTP.

    406 GitHub stars~2.6k tokensUpdated 12 days ago
    Backend & APIsAuto-check passed

More from WrongStack/WrongStack

All 100 skills in this repo
  • Tech Stack

    WrongStack/WrongStack

    Validate and upgrade dependencies against live registries and official migration guides in any ecosystem.

    371 GitHub stars~1.5k tokensUpdated today
    Auto-check passed
  • Skill Creator

    WrongStack/WrongStack

    Create, improve and validate WrongStack SKILL.md bundles with precise discovery, progressive resources and current runtime contracts.

    371 GitHub stars~1.3k tokensUpdated today
    Auto-check passed
  • Bug Hunter

    WrongStack/WrongStack

    A skill your agent uses when scanning source code for bugs, anti-patterns, code smells, or quality issues in a codebase, or when running a proof-driven bug hunt that must find, prove, fix, and…

    371 GitHub stars~2.4k tokensUpdated today
    Auto-check passed
  • Design Craft

    WrongStack/WrongStack

    Design or substantially improve user-facing interfaces with a product-specific visual direction, content hierarchy, and rendered critique.

    371 GitHub stars~2.3k tokensUpdated today
    Auto-check passed
  • Design Critique

    WrongStack/WrongStack

    A skill your agent uses to audit an interface that already exists and say precisely why it looks generated, templated, or unfinished — a scored rubric across composition, typography, color, states…

    371 GitHub stars~2.5k tokensUpdated today
    Auto-check passed
  • Mailbox Bridge

    WrongStack/WrongStack

    A skill your agent uses when external coding agents (Claude Code, Aider, custom scripts) need to participate in the project's shared WrongStack mailbox, or when a user asks to "expose the mailbox"…

    371 GitHub stars~2.6k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Payments Webhooks

What does Payments Webhooks do?

Implement payment-provider integration and reliable authenticated webhook processing for an owned application. Payments Webhooks is an agent skill from WrongStack/WrongStack. Implement payment-provider integration and reliable authenticated webhook processing for an owned application.

When should I use Payments Webhooks?

Payments Webhooks fits situations like: building checkout; billing reconciliation; separate payment events; entitlement state and provider verification.

How do I install Payments Webhooks in Claude Code?

Run `npx skills add WrongStack/WrongStack --skill payments-webhooks -a claude-code`. Or copy the skill folder (packages/core/skills/payments-webhooks in WrongStack/WrongStack) into .claude/skills/payments-webhooks in your project. Claude Code loads it when a task matches its description.

How do I install Payments Webhooks in Codex?

Run `npx skills add WrongStack/WrongStack --skill payments-webhooks -a codex`. Or copy the skill folder (packages/core/skills/payments-webhooks in WrongStack/WrongStack) into .agents/skills/payments-webhooks in your project. Codex loads it when a task matches its description.

Can I use Payments Webhooks in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add WrongStack/WrongStack --skill payments-webhooks -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/payments-webhooks, .gemini/skills/payments-webhooks, .github/skills/payments-webhooks and .opencode/skills/payments-webhooks in your project.

What does Payments Webhooks need to run?

SKILL.md names no scripts, command-line tools or credentials: Payments Webhooks is instructions for the agent only.

Does Payments Webhooks access the network?

SKILL.md names 1 domain. As links in the text: docs.stripe.com. This is read from the text; nothing was executed.

Is Payments Webhooks safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Payments Webhooks use?

Payments Webhooks is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Payments Webhooks use?

About 850 tokens (SKILL.md is roughly 3.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Payments Webhooks?

Skills that share tags, products or a category with Payments Webhooks: Stripe Apps (fossasia/eventyay, 1.7k stars), Stripe Best Practices (kanchengw/cnllm, 173 stars), Cashier Stripe Development (luadotsh/lua, 343 stars) and Stripe Best Practices (fossasia/eventyay, 1.7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Payments Webhooks?

WrongStack (a GitHub organization) maintains it in WrongStack/WrongStack, which has 371 GitHub stars. The repository holds 100 skills in this directory. The repository was last updated on October 10, 2026.

Source: WrongStack/WrongStack on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.