The check-payments skill provides a comprehensive security and configuration review for applications utilizing multiple payment gateways. By automatically detecting the presence of Stripe, Bitcoin, Lightning (LND), or BTCPay Server, it orchestrates a series of deep-dive checks to identify critical vulnerabilities like unverified webhooks, missing environment variables, or a lack of idempotency keys. It consolidates all findings into a prioritized P0-P3 report, giving developers a clear roadmap of risks and technical debt without modifying the source code, making it an essential tool for fintech and e-commerce pre-flight checks.
주요 기능
01Consolidated P0-P3 prioritized vulnerability reporting
02Automatic multi-provider detection (Stripe, Bitcoin, LND, BTCPay)
03Cross-provider issue deduplication and summarization
04Security audit for webhook verification and RPC credentials
055 GitHub stars
06Infrastructure health check for payment-related environment variables
사용 사례
01Consolidating fragmented logs from various payment SDKs into a single report
02Identifying missing environment variables and configuration gaps in multi-currency systems
03Performing a security audit on a fintech codebase before production deployment