phrazzld

log-stripe-issues

2
1
# Install this skill:
npx skills add phrazzld/claude-config --skill "log-stripe-issues"

Install specific skill from multi-skill repository

# Description

|

# SKILL.md


name: log-stripe-issues
description: |
Run /check-stripe, then create GitHub issues for all findings.
Issues are created with priority labels and structured format.
Use /fix-stripe instead if you want to fix issues immediately.


/log-stripe-issues

Run Stripe integration audit and create GitHub issues for all findings.

What This Does

  1. Invoke /check-stripe to audit Stripe integration
  2. Parse findings by priority (P0-P3)
  3. Check existing issues to avoid duplicates
  4. Create GitHub issues for each finding

This is an issue-creator. It creates work items, not fixes. Use /fix-stripe to fix issues.

Process

1. Run Primitive

Invoke /check-stripe skill to get structured findings.

2. Check Existing Issues

gh issue list --state open --label "domain/stripe" --limit 50

3. Create Issues

For each finding:

gh issue create \
  --title "[P0] Webhook signature not verified" \
  --body "$(cat <<'EOF'
## Problem
Stripe webhook endpoint does not verify signatures. Security vulnerability.

## Impact
- Attackers can forge webhook events
- Fake payment confirmations possible
- Customer data manipulation risk
- PCI compliance violation

## Location
`app/api/webhooks/stripe/route.ts`

## Suggested Fix
Run `/fix-stripe` or manually add:
```typescript
const event = stripe.webhooks.constructEvent(
  body,
  signature,
  process.env.STRIPE_WEBHOOK_SECRET!
);

Created by /log-stripe-issues
EOF
)" \
--label "priority/p0,domain/stripe,type/bug"

### 4. Issue Format

**Title:** `[P{0-3}] Stripe issue description`

**Labels:**
- `priority/p0` | `priority/p1` | `priority/p2` | `priority/p3`
- `domain/stripe`
- `type/bug` | `type/enhancement` | `type/chore`

**Body:**
```markdown
## Problem
What's wrong with Stripe integration

## Impact
Business/security/user impact

## Location
File:line if applicable

## Suggested Fix
Code snippet or skill to run

---
Created by `/log-stripe-issues`

Priority Mapping

Gap Priority
Missing webhook secret P0
Hardcoded keys P0
Webhook verification missing P1
No customer portal P1
Subscription status not checked P1
No idempotency keys P2
Poor error handling P2
CLI profile issues P2
Advanced features P3

Output

After running:

Stripe Issues Created:
- P0: 1 (webhook verification)
- P1: 3 (portal, subscription checks)
- P2: 2 (idempotency, error handling)
- P3: 2 (advanced features)

Total: 8 issues created
View: gh issue list --label domain/stripe
  • /check-stripe - The primitive (audit only)
  • /fix-stripe - Fix Stripe issues
  • /stripe - Full Stripe lifecycle
  • /stripe-health - Webhook diagnostics
  • /groom - Full backlog grooming

# Supported AI Coding Agents

This skill is compatible with the SKILL.md standard and works with all major AI coding agents:

Learn more about the SKILL.md standard and how to use these skills with your preferred AI coding agent.