How does it detect which providers are in use?

It scans package.json for SDKs, checks for specific environment variables in .env files, and looks for installed command-line tools like bitcoin-cli.

What does the P0-P3 categorization mean?

P0 represents critical vulnerabilities like missing secrets or unverified webhooks, while P3 suggests minor 'nice-to-have' improvements or best practices.

Does this skill fix payment issues automatically?

No, check-payments is a diagnostic primitive designed for investigation and reporting only; it identifies issues but does not modify your code.

Which payment providers are supported?

The skill currently supports Stripe, Bitcoin (via bitcoin-cli), Lightning (via lncli), and BTCPay Server.

Payment Infrastructure Audit

Name: Payment Infrastructure Audit
Author: phrazzld

byphrazzld

•

E-commerce Solutions

Audits multi-provider payment integrations to identify security, configuration, and implementation risks across Stripe, Bitcoin, and Lightning networks.

The check-payments skill provides a comprehensive security and configuration review for applications utilizing multiple payment gateways. By automatically detecting the presence of Stripe, Bitcoin, Lightning (LND), or BTCPay Server, it orchestrates a series of deep-dive checks to identify critical vulnerabilities like unverified webhooks, missing environment variables, or a lack of idempotency keys. It consolidates all findings into a prioritized P0-P3 report, giving developers a clear roadmap of risks and technical debt without modifying the source code, making it an essential tool for fintech and e-commerce pre-flight checks.

Key Features

01Consolidated P0-P3 prioritized vulnerability reporting

02Automatic multi-provider detection (Stripe, Bitcoin, LND, BTCPay)

03Cross-provider issue deduplication and summarization

04Security audit for webhook verification and RPC credentials

055 GitHub stars

06Infrastructure health check for payment-related environment variables

Use Cases

01Consolidating fragmented logs from various payment SDKs into a single report

02Identifying missing environment variables and configuration gaps in multi-currency systems

03Performing a security audit on a fintech codebase before production deployment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add phrazzld/claude-config check-payments

For use in Claude.ai and ChatGPT

Download Skill