The Agent Skills Directory

[SAFE]: The skill correctly implements webhook signature verification using stripe.webhooks.constructEvent to authenticate incoming requests from Stripe.\n- [SAFE]: Sensitive API keys and webhook secrets are managed via environment variables (process.env.STRIPE_SECRET_KEY, process.env.STRIPE_WEBHOOK_SECRET) rather than being hardcoded.\n- [SAFE]: The webhook handler includes an idempotency check by tracking event.id in a database, preventing duplicate processing of replayed events.\n- [SAFE]: User access is gated based on internal database state synchronized via webhooks, which is a recommended pattern to avoid rate limits and improve service resilience.

subscription-fullstack