stripe-agent
Manage Stripe Billing Operations
Stripe billing setup can be difficult to keep consistent across test and live modes. This skill guides Claude, Codex, and Claude Code through products, subscriptions, checkout, webhooks, and billing audits.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "stripe-agent" from https://skillstore.io/skills/cleanexpo-stripe-agent.md and its manifest at https://skillstore.io/api/skills/cleanexpo-stripe-agent/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "stripe-agent". Audit Stripe setup for production readiness.
Expected outcome:
- Test mode products and prices are present for all tiers.
- Live webhook registration needs confirmation before launch.
- Store missing live webhook secret in the production environment.
Using "stripe-agent". Create checkout for an internal staff email on the Professional monthly plan.
Expected outcome:
The workflow selects test mode, creates or reuses the customer, attaches Professional monthly pricing, and returns the checkout session link.
Using "stripe-agent". Generate a monthly billing report.
Expected outcome:
The report summarizes recurring revenue by tier, new subscriptions, churned subscriptions, active trials, conversions, and failed payment follow-up items.
Security Audit
High RiskAll 78 static findings were adjudicated. The backtick, hardcoded URL, and secret-key hits are documentation examples or placeholders, not executable code or leaked credentials. The remaining concerns are semantic: live billing, webhook, and secret-handling workflows need stronger approval and verification guardrails.
Confirmed security concerns (3)
Risk Factors
⚙️ External commands (70)
🌐 Network access (4)
🔑 Env variables (2)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/cleanexpo-stripe-agent/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/cleanexpo-stripe-agent?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/cleanexpo-stripe-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cleanexpo-stripe-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/cleanexpo-stripe-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
CleanExpo. (2026). stripe-agent security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cleanexpo-stripe-agent/audits/9BibTeX citation
@techreport{cleanexpo-cleanexpo-stripe-agent-2026,
author = {CleanExpo},
title = {stripe-agent security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/cleanexpo-stripe-agent/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "stripe-agent security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "CleanExpo"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/cleanexpo-stripe-agent/audits/9"
identifiers:
- type: other
value: "skillstore:cleanexpo-stripe-agent:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Set up SaaS billing tiers
Define Stripe products, prices, and checkout flows for Starter, Professional, and Elite plans.
Audit billing configuration
Check required environment variables, webhook registration, product parity, and missing setup steps.
Investigate subscription state
Review customer subscriptions, invoice status, plan changes, and workspace entitlement sync needs.
Try These Prompts
Help me set up Stripe products and prices for Starter, Professional, and Elite tiers in test mode first. List the IDs I must store.
Create a checkout plan for this user email, tier, billing interval, workspace ID, and user ID. Choose test or live mode and explain why.
Audit our Stripe billing setup. Check required variables, products, prices, webhook registration, and parity between test and live mode.
Review a failed webhook or subscription mismatch. Compare Stripe status, workspace tier, invoice state, and recommended sync actions without exposing secrets.
Best Practices
- Run all setup and checkout tests in Stripe test mode before touching live billing.
- Require human approval for live product, price, subscription, cancellation, and webhook changes.
- Redact secret keys, webhook secrets, customer IDs, and payment details in all reports.
Avoid
- Running live billing setup from vague or incomplete prompts.
- Mixing test price IDs, live price IDs, and customer records across modes.
- Logging full Stripe secrets, webhook payloads, or payment identifiers in chat.