How do I install the Payments skill?

Run npx skillmds@latest add johnalbertini14-glitch/payments in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Payments safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Payments?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Payments free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Payments?

johnalbertini14-glitch (@johnalbertini14-glitch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Payments by johnalbertini14-glitch — Agent Skill

Name: Payments
Rating: 4.666666666666667 (3 reviews)
Author: johnalbertini14-glitch

File contents

Situation Detection

Context	Load
Choosing Stripe vs Paddle vs LemonSqueezy	`providers.md`
Implementing checkout, webhooks, refunds	`integration.md`
Subscription billing, trials, upgrades	`subscriptions.md`
PCI compliance, fraud prevention	`security.md`

Universal Rules

Never store card data. Use provider-hosted checkout or tokenization. PCI compliance burden explodes the moment raw card numbers touch your server.

Webhooks are truth. Client-side success callbacks lie. A payment succeeded only when your webhook confirms it. Design for webhook-first verification.

Test mode exists for a reason. Use test cards, simulate failures, verify webhook handling. Production surprises cost real money and real customers.

Pricing psychology: $9.99/mo feels cheaper than $120/year, but annual retention is 2-3x higher. Default to annual with monthly option, not the reverse.

Provider Quick Compare

Need	Recommendation
US/global B2C	Stripe (best docs, widest coverage)
SaaS selling to EU (VAT headache)	Paddle, LemonSqueezy (merchant of record)
Simple product, no dev resources	Gumroad, Lemonsqueezy hosted
Marketplace with splits	Stripe Connect
High-risk or adult	Specialized processors (CCBill, Epoch)

See providers.md for detailed comparison.

Integration Checklist

Before going live:

Webhook endpoint secured and verified
Idempotency keys on all charges
Failure states handled (declined, expired, insufficient)
Receipts and invoices configured
Refund flow tested
Subscription lifecycle events handled (upgrade, downgrade, cancel)
Currency handling explicit (store in cents/smallest unit)

Red Flags

Storing CVV anywhere, ever → Instant PCI violation
Trusting client-side payment confirmation → Fraud vector
No retry logic for failed webhooks → Lost transactions
Hardcoding prices in frontend → Easy manipulation
Missing cancel_at_period_end handling → Angry customers

When to Load More

Situation	Reference
Evaluating payment processors	`providers.md`
Building checkout, handling webhooks	`integration.md`
Recurring billing, metering, trials	`subscriptions.md`
Fraud, PCI, chargebacks	`security.md`

---name: paymentsdescription: Integrate payments with provider selection, checkout flows, subscription billing, and security best practices.--- ## Situation Detection | Context | Load | |---------|------| | Choosing Stripe vs Paddle vs LemonSqueezy | `providers.md` | | Implementing checkout, webhooks, refunds | `integration.md` | | Subscription billing, trials, upgrades | `subscriptions.md` | | PCI compliance, fraud prevention | `security.md` | --- ## Universal Rules **Never store card data.** Use provider-hosted checkout or tokenization. PCI compliance burden explodes the moment raw card numbers touch your server. **Webhooks are truth.** Client-side success callbacks lie. A payment succeeded only when your webhook confirms it. Design for webhook-first verification. **Test mode exists for a reason.** Use test cards, simulate failures, verify webhook handling. Production surprises cost real money and real customers. **Pricing psychology:** $9.99/mo feels cheaper than $120/year, but annual retention is 2-3x higher. Default to annual with monthly option, not the reverse. --- ## Provider Quick Compare | Need | Recommendation | |------|----------------| | US/global B2C | Stripe (best docs, widest coverage) | | SaaS selling to EU (VAT headache) | Paddle, LemonSqueezy (merchant of record) | | Simple product, no dev resources | Gumroad, Lemonsqueezy hosted | | Marketplace with splits | Stripe Connect | | High-risk or adult | Specialized processors (CCBill, Epoch) | See `providers.md` for detailed comparison. --- ## Integration Checklist Before going live: - [ ] Webhook endpoint secured and verified - [ ] Idempotency keys on all charges - [ ] Failure states handled (declined, expired, insufficient) - [ ] Receipts and invoices configured - [ ] Refund flow tested - [ ] Subscription lifecycle events handled (upgrade, downgrade, cancel) - [ ] Currency handling explicit (store in cents/smallest unit) --- ## Red Flags - Storing CVV anywhere, ever → Instant PCI violation - Trusting client-side payment confirmation → Fraud vector - No retry logic for failed webhooks → Lost transactions - Hardcoding prices in frontend → Easy manipulation - Missing `cancel_at_period_end` handling → Angry customers --- ## When to Load More | Situation | Reference | |-----------|-----------| | Evaluating payment processors | `providers.md` | | Building checkout, handling webhooks | `integration.md` | | Recurring billing, metering, trials | `subscriptions.md` | | Fraud, PCI, chargebacks | `security.md` |

Frequently asked questions

Payments