Made by@shipcheckStripe webhook hardening
@shipcheck/stripe-webhook-hardening
Find your Stripe webhook handlers and harden them: verify the Stripe-Signature header, use the raw body, keep the signing secret in env, process each event once, reject bad signatures with 400, and fulfill orders from the webhook rather than the success page. Reads your code and proposes diffs; never calls Stripe.
- Activity
- New: be the first to try it
- Installs
- 0 installs
- Likes
- 0 likes
- Clones
- 0 clones
What this kit declares, in the same words the CLI shows before you install. On Claude Code the CLI turns these into permission rules, so the agent stops anything undeclared.
Command
Runs the command: node scripts/webhook-scan.mjs (with any arguments, without asking)
Reads
Reads files in ./**
Writes
Writes files in ./out/**
Writes
Writes files in ./app/**
Writes
Writes files in ./src/**
Writes
Writes files in ./pages/**
Writes
Writes files in ./server/**
Writes
Writes files in ./api/**
Writes
Writes files in ./supabase/functions/**
Writes
Writes files in ./supabase/migrations/**
- Works with
- claude-code
- License
- MIT