Use when you have a written implementation plan to execute in a separate session with review checkpoints
npx skills add phrazzld/claude-config --skill "log-stripe-issues"
Install specific skill from multi-skill repository
# Description
|
# SKILL.md
name: log-stripe-issues
description: |
Run /check-stripe, then create GitHub issues for all findings.
Issues are created with priority labels and structured format.
Use /fix-stripe instead if you want to fix issues immediately.
/log-stripe-issues
Run Stripe integration audit and create GitHub issues for all findings.
What This Does
- Invoke
/check-stripeto audit Stripe integration - Parse findings by priority (P0-P3)
- Check existing issues to avoid duplicates
- Create GitHub issues for each finding
This is an issue-creator. It creates work items, not fixes. Use /fix-stripe to fix issues.
Process
1. Run Primitive
Invoke /check-stripe skill to get structured findings.
2. Check Existing Issues
gh issue list --state open --label "domain/stripe" --limit 50
3. Create Issues
For each finding:
gh issue create \
--title "[P0] Webhook signature not verified" \
--body "$(cat <<'EOF'
## Problem
Stripe webhook endpoint does not verify signatures. Security vulnerability.
## Impact
- Attackers can forge webhook events
- Fake payment confirmations possible
- Customer data manipulation risk
- PCI compliance violation
## Location
`app/api/webhooks/stripe/route.ts`
## Suggested Fix
Run `/fix-stripe` or manually add:
```typescript
const event = stripe.webhooks.constructEvent(
body,
signature,
process.env.STRIPE_WEBHOOK_SECRET!
);
Created by /log-stripe-issues
EOF
)" \
--label "priority/p0,domain/stripe,type/bug"
### 4. Issue Format
**Title:** `[P{0-3}] Stripe issue description`
**Labels:**
- `priority/p0` | `priority/p1` | `priority/p2` | `priority/p3`
- `domain/stripe`
- `type/bug` | `type/enhancement` | `type/chore`
**Body:**
```markdown
## Problem
What's wrong with Stripe integration
## Impact
Business/security/user impact
## Location
File:line if applicable
## Suggested Fix
Code snippet or skill to run
---
Created by `/log-stripe-issues`
Priority Mapping
| Gap | Priority |
|---|---|
| Missing webhook secret | P0 |
| Hardcoded keys | P0 |
| Webhook verification missing | P1 |
| No customer portal | P1 |
| Subscription status not checked | P1 |
| No idempotency keys | P2 |
| Poor error handling | P2 |
| CLI profile issues | P2 |
| Advanced features | P3 |
Output
After running:
Stripe Issues Created:
- P0: 1 (webhook verification)
- P1: 3 (portal, subscription checks)
- P2: 2 (idempotency, error handling)
- P3: 2 (advanced features)
Total: 8 issues created
View: gh issue list --label domain/stripe
Related
/check-stripe- The primitive (audit only)/fix-stripe- Fix Stripe issues/stripe- Full Stripe lifecycle/stripe-health- Webhook diagnostics/groom- Full backlog grooming
# Supported AI Coding Agents
This skill is compatible with the SKILL.md standard and works with all major AI coding agents:
Learn more about the SKILL.md standard and how to use these skills with your preferred AI coding agent.