skills.rest
robconery
robconeryCOMMUNITY
Explore all skills by this author →
Website𝕏@robconeryGitHub

security

Verify Stripe webhook signature checks, secrets handling, and input validation in Cloudflare Workers.

7|2|Updated Apr 28, 2026
Search Tags:#security review#secrets management#idempotency#signature verification#SQL safety#stripe webhooks#PII-safe logging
One-click install
npx skills add https://github.com/robconery/crap-code --skill security-robconery
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/robconery/crap-code/tree/main/.pi/skills/security
Command: npx skills add https://github.com/robconery/crap-code --skill security-robconery

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reduces the risk of security failures in a Stripe webhook fulfillment pipeline by enforcing signature verification, safe secret handling, strict input validation, and secure error/logging practices.

Core Features & Use Cases

  • Webhook integrity validation: Ensures Stripe signature verification is present on inbound Stripe routes and that request bodies are validated at the route layer with Zod.
  • Secrets and error hygiene: Prevents hardcoded secrets, avoids noisy or leaking logs, and requires that errors are logged and re-thrown (no silent failures).
  • Security invariants for related components: Checks SQL safety with parameterization and idempotency via unique constraints, enforces tight TTL for signed URLs, and verifies explicit authz on protected surfaces.

Quick Start

Ask the AI to run the security skill review for your Stripe webhook fulfillment task, checking for signature verification, secrets hygiene, PII-safe logging, SQL safety, signed URL TTL, and explicit authz.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Stripe webhook signatures in a Cloudflare Worker?▼

Stripe webhook signature verification in Cloudflare Workers requires validating inbound request bodies at the route layer, enforcing strict signature checks and Zod input validation to prevent webhook fulfillment vulnerabilities.

What does PII-safe logging require for Stripe fulfillment routes?▼

PII-safe logging requires preventing noisy or leaking logs, ensuring errors are logged and re-thrown without silent failures, and avoiding hardcoded secrets across webhook-driven fulfillment pipelines.

How do I enforce idempotency and SQL safety in webhook persistence flows?▼

SQL safety and idempotency in webhook persistence require parameterized queries and unique database constraints, ensuring secure error handling and safe persistence for inbound Stripe fulfillment requests.

Does this security review check signed URL TTL and explicit authz on protected surfaces?▼

The security review checks tight TTL for signed URLs and verifies explicit authz on protected surfaces, enforcing security invariants for related components within Cloudflare Worker fulfillment routes.

What pass/fail criteria does a webhook security review enforce?▼

The review enforces pass/fail checklist criteria with CWE/OWASP-cited findings, requiring deterministic verdict logging, a security sprint state transition on pass, or a strike record with a findings summary on fail.

Related Skills

Explore More Software Engineering Skills→
rohunvorarohunvora
20

webhook-notify

Route external webhooks through Cloudflare Worker and ntfy.sh to macOS notifications.

Community
Advanced
mahg-esmahg-es
3

secure-code

Review source code for security vulnerabilities with CWE mappings and concrete fixes.

Official
Advanced
niksavisniksavis
1

sqlite-persistence-safety

Enforces parameterized SQL and reversible migrations for SQLite persistence changes.

Community
Intermediate
AgentientAgentient
2

owasp-code-analysis

Detect OWASP Top 10 2021 vulnerabilities in codebases and configurations.

Official
Basic