Payments
Installation
SKILL.md
Situation Detection
| Context | Load |
|---|---|
| Choosing Stripe vs Paddle vs LemonSqueezy | providers.md |
| Implementing checkout, webhooks, refunds | integration.md |
| Subscription billing, trials, upgrades | subscriptions.md |
| PCI compliance, fraud prevention | security.md |
Universal Rules
Never store card data. Use provider-hosted checkout or tokenization. PCI compliance burden explodes the moment raw card numbers touch your server.
Webhooks are truth. Client-side success callbacks lie. A payment succeeded only when your webhook confirms it. Design for webhook-first verification.
Test mode exists for a reason. Use test cards, simulate failures, verify webhook handling. Production surprises cost real money and real customers.