Payment Infrastructure Audit

•
5
•

Audits multi-provider payment integrations to identify security, configuration, and implementation risks across Stripe, Bitcoin, and Lightning networks.

The check-payments skill provides a comprehensive security and configuration review for applications utilizing multiple payment gateways. By automatically detecting the presence of Stripe, Bitcoin, Lightning (LND), or BTCPay Server, it orchestrates a series of deep-dive checks to identify critical vulnerabilities like unverified webhooks, missing environment variables, or a lack of idempotency keys. It consolidates all findings into a prioritized P0-P3 report, giving developers a clear roadmap of risks and technical debt without modifying the source code, making it an essential tool for fintech and e-commerce pre-flight checks.

主な機能

01Consolidated P0-P3 prioritized vulnerability reporting
02Automatic multi-provider detection (Stripe, Bitcoin, LND, BTCPay)
03Cross-provider issue deduplication and summarization
04Security audit for webhook verification and RPC credentials
055 GitHub stars
06Infrastructure health check for payment-related environment variables

ユースケース

01Consolidating fragmented logs from various payment SDKs into a single report
02Identifying missing environment variables and configuration gaps in multi-currency systems
03Performing a security audit on a fintech codebase before production deployment