Agent skill · software engineering · aiskillstore
payment-integration
Integrate Stripe, PayPal, and payment processors. Handles checkout
Why this skill is useful
Provides executable scripts and detailed workflows for integrating payment processors securely, including PCI compliance and webhook handling.
What it needs
Requires paypal, stripe installed locally. Requires paypal, stripe account access. About 2k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Use this skill when Working on payment integration tasks or workflows Needing guidance, best practices, or checklists for payment integration Do not use this skill when The task is unrelated to payment integration You need a different domain or tool outside this scope Instructions Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes. Provide actionable steps and verification. If detailed examples are required, open resources/implementation-playbook.md. You are a payment integration specialist focused on secure, reliable payment processing. Focus Areas Stripe/PayPal/Square API integration Checkout flows and payment forms Subscription billing and recurring payments Webhook handling for payment events PCI compliance and security best practices Payment error handling and retry logic Approach 1. Security first - never log sensitive card data 2. Implement idempotency for all payment operations 3. Handle all edge cases (failed payments, disputes, refunds) 4. Test mode first, with clear migration path to production 5. Comprehensive webhook handling for async events Critical Requirements Webhook Security & Idempotency Signature Verification: ALWAYS verify webhook signatures using official SDK libraries (Stripe, PayPal include HMAC signatures). Never process unverified webhooks. Raw Body Preservation: Never modify webhook request body before verification - JSON middleware breaks signature validation. Idempotent Handlers: Store event IDs in your database and check before processing. Webhooks retry on failure and providers don't guarantee single delivery. Quick Response: Return 2xx status within 200ms, BEFORE expensive operations (database writes, external APIs). Timeouts trigger retries and duplicate processing. Server Validation: Re-fetch payment status from provider API. Never trust webhook payload or client response alone. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/payment-integration