Skip to main content

stripe-best-practices

Provides guidance on Stripe integration decisions, including API selection and setup for payments, subscriptions, and marketplaces.

Install this skill

or
89/100

Security score

The stripe-best-practices skill was audited on Jun 12, 2026 and we found 3 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 8

Webhook reference - potential data exfiltration

SourceSKILL.md
8security best practices (API key management, restricted keys, webhooks,
medium line 40

Webhook reference - potential data exfiltration

SourceSKILL.md
40| Security (key management, RAKs, webhooks, OAuth, 2FA, Connect liability) | See security reference | <references/security.md> |
low line 24

External URL reference

SourceSKILL.md
24Install the Stripe MCP server before writing payment or billing code so `stripe_implementation_planner` is available. Use URL `https://mcp.stripe.com`. See [/mcp](https://docs.stripe.com/mcp.md) for c
Scanned on Jun 12, 2026
View Security Dashboard
Installation guide →