المهارات plaid-fintech
📦

plaid-fintech

آمن

Integrate Plaid API for Banking Data and Payments

Building fintech apps requires secure Plaid API integration patterns. This skill provides proven approaches for Link token flows, transaction sync, webhook handling, and compliance requirements.

يدعم: Claude Codex Code(CC)
🥉 74 برونزي
1

تنزيل ZIP المهارة

2

رفع في Claude

اذهب إلى Settings → Capabilities → Skills → Upload skill

3

فعّل وابدأ الاستخدام

اختبرها

استخدام "plaid-fintech". User wants to implement Plaid Link token creation

النتيجة المتوقعة:

Generate server-side endpoint code for /create_link_token with proper product configuration (auth, transactions, identity), client-side Plaid Link initialization with the returned token, and callback handler for public_token exchange

استخدام "plaid-fintech". Handle ITEM_LOGIN_REQUIRED error during transaction fetch

النتيجة المتوقعة:

Detect ITEM_LOGIN_REQUIRED in API response, flag the user account as needing re-authentication, surface the update_link token to client, and guide user through Link update mode without losing historical data

التدقيق الأمني

آمن
v1 • 2/24/2026

Static analyzer flagged 5 patterns as potential security issues, but all are false positives. The 'weak cryptographic algorithm' matches are triggered by the word 'verification' in documentation text describing Plaid API features. The 'system reconnaissance' matches are triggered by 'link_token' which is a legitimate Plaid API concept for OAuth-style bank connections. This skill contains only documentation with no executable code, making it safe for publication.

1
الملفات التي تم فحصها
55
الأسطر التي تم تحليلها
0
النتائج
1
إجمالي عمليات التدقيق
لا توجد مشكلات أمنية
تم تدقيقه بواسطة: claude

درجة الجودة

38
الهندسة المعمارية
100
قابلية الصيانة
87
المحتوى
50
المجتمع
100
الأمان
91
الامتثال للمواصفات

ماذا يمكنك بناءه

Fintech Startup Onboarding

A developer building a personal finance app needs to connect user bank accounts securely. Use this skill to implement the Link token flow and handle authentication errors gracefully.

Payment Application Integration

An e-commerce platform wants to enable ACH payments. Use this skill to implement Auth verification and handle ITEM_LOGIN_REQUIRED errors during payment setup.

Transaction Analysis Tool

A budgeting app needs efficient transaction syncing without redundant API calls. Use this skill to implement /transactions/sync and webhook-based updates instead of polling.

جرّب هذه الموجهات

Basic Link Token Setup
I need to implement Plaid Link in my app. Show me the flow for creating a link_token server-side, presenting it to users, and exchanging the public_token for an access_token.
Transaction Sync Implementation
Help me implement efficient transaction fetching using /transactions/sync instead of /transactions/get. Show how to handle the cursor for incremental updates and detect when full refresh is needed.
Webhook Handler Design
Design a webhook handler for Plaid webhooks. Focus on ITEM_LOGIN_REQUIRED and PENDING_DISCONNECT events. Show how to notify users proactively and guide them through update mode.
Error Handling Strategy
Create a comprehensive error handling strategy for Plaid API integration. Cover Item errors, API errors, and user-facing messages. Include retry logic and when to prompt users to re-link accounts.

أفضل الممارسات

  • Store access_tokens encrypted at rest using platform key management services
  • Use webhooks for real-time updates instead of polling to reduce API calls
  • Handle PENDING_DISCONNECT webhooks proactively to minimize user friction

تجنب

  • Storing access tokens in plain text or client-side storage
  • Polling /transactions/get repeatedly instead of using /transactions/sync with webhooks
  • Ignoring Item errors which can lead to stale data and broken user experiences

الأسئلة المتكررة

Do Link tokens expire?
Yes, Link tokens are short-lived (typically 30 minutes) and single-use. Create a new token each time a user needs to link an account or update credentials.
Do access tokens expire?
Access tokens do not expire by default. However, they may become invalid if users change their bank credentials. Listen for ITEM_LOGIN_REQUIRED errors to detect when re-authentication is needed.
What is the difference between /transactions/get and /transactions/sync?
Use /transactions/sync for incremental updates with cursor-based pagination. It returns only new, modified, or removed transactions since your last sync. /transactions/get returns all transactions and is less efficient for regular updates.
How do I handle webhook security?
Verify webhook signatures using Plaid's verification key. Validate the webhook payload structure and ensure your endpoint is HTTPS-only. Handle webhooks asynchronously to avoid timeout issues.
What products should I enable for Link tokens?
Only enable products you actively use. Common combinations: auth (for ACH verification), transactions (for transaction history), identity (for account holder verification). Each enabled product affects pricing.
How do I test Plaid integration without real bank accounts?
Use Plaid Sandbox environment with test credentials. Sandbox provides deterministic test accounts with controllable behaviors like pending disconnects, item errors, and specific transaction patterns.

تفاصيل المطور

المؤلف

sickn33

الترخيص

MIT

مرجع

main

بنية الملفات

📄 SKILL.md