@shipcheck/stripe-webhook-hardening · v1.0.0

Install this kit

This kit reads ./**, writes to ./out/**, ./app/**, ./src/**, ./pages/**, ./server/**, ./api/**, ./supabase/functions/**, ./supabase/migrations/** and runs node scripts/webhook-scan.mjs. Install it?

1. Run this

slashclone add @shipcheck/stripe-webhook-hardening --agent codex

In your project folder. Add --scope user to install for every project.

2. Check what it will do

Your terminal shows the same list and asks before anything is written.

Not enforced

Codex does not enforce the permissions this kit declares. Nothing stops the kit from doing more than it says; Codex's own approval settings decide what it asks you about.

Not marked for Codex

The author has not marked this kit as working with Codex (compat: claude-code).

Command
Runs the command: node scripts/webhook-scan.mjs (with any arguments, without asking)
Reads
Reads files in ./**
Writes
Writes files in ./out/**
Writes
Writes files in ./app/**
Writes
Writes files in ./src/**
Writes
Writes files in ./pages/**
Writes
Writes files in ./server/**
Writes
Writes files in ./api/**
Writes
Writes files in ./supabase/functions/**
Writes
Writes files in ./supabase/migrations/**

Safety

Scan passed
Not reviewed yet
Tests pass (3 of 3)

The CLI verifies the sha256 966ecae6253d… and the platform signature (10aff36bedd43e66) before writing a file.

3. Then

Approve in your terminal. Nothing is written until you do.
Ask Claude for the job the kit does. It picks the kit up on its own.
Change your mind with slashclone remove @shipcheck/stripe-webhook-hardening.

I installed it