log-stripe-issues

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

/log-stripe-issues

/log-stripe-issues

Run Stripe integration audit and create GitHub issues for all findings.
运行Stripe集成审计并为所有检测结果创建GitHub issues。

What This Does

功能说明

  1. Invoke
    /check-stripe
    to audit Stripe integration
  2. Parse findings by priority (P0-P3)
  3. Check existing issues to avoid duplicates
  4. Create GitHub issues for each finding
This is an issue-creator. It creates work items, not fixes. Use
/fix-stripe
to fix issues.
  1. 调用
    /check-stripe
    对Stripe集成进行审计
  2. 按优先级(P0-P3)解析检测结果
  3. 检查现有issues以避免重复
  4. 为每个检测结果创建GitHub issues
**这是一个问题创建工具。**它仅创建工作项,不修复问题。如需修复问题,请使用
/fix-stripe

Process

流程

1. Run Primitive

1. 调用基础工具

Invoke
/check-stripe
skill to get structured findings.
调用
/check-stripe
技能以获取结构化检测结果。

2. Check Existing Issues

2. 检查现有问题

bash
gh issue list --state open --label "domain/stripe" --limit 50
bash
gh issue list --state open --label "domain/stripe" --limit 50

3. Create Issues

3. 创建问题

For each finding:
bash
gh issue create \
  --title "[P0] Webhook signature not verified" \
  --body "$(cat <<'EOF'
针对每个检测结果:
bash
gh issue create \
  --title "[P0] Webhook signature not verified" \
  --body "$(cat <<'EOF'

Problem

问题

Stripe webhook endpoint does not verify signatures. Security vulnerability.
Stripe webhook端点未验证签名,存在安全漏洞。

Impact

影响

  • Attackers can forge webhook events
  • Fake payment confirmations possible
  • Customer data manipulation risk
  • PCI compliance violation
  • 攻击者可伪造webhook事件
  • 可能出现虚假付款确认
  • 存在客户数据被篡改风险
  • 违反PCI合规要求

Location

位置

app/api/webhooks/stripe/route.ts
app/api/webhooks/stripe/route.ts

Suggested Fix

建议修复方案

Run
/fix-stripe
or manually add:
typescript
const event = stripe.webhooks.constructEvent(
  body,
  signature,
  process.env.STRIPE_WEBHOOK_SECRET!
);

Created by
/log-stripe-issues
EOF )"
--label "priority/p0,domain/stripe,type/bug"
undefined
运行
/fix-stripe
或手动添加:
typescript
const event = stripe.webhooks.constructEvent(
  body,
  signature,
  process.env.STRIPE_WEBHOOK_SECRET!
);

Created by
/log-stripe-issues
EOF )"
--label "priority/p0,domain/stripe,type/bug"
undefined

4. Issue Format

4. Issue格式

Title:
[P{0-3}] Stripe issue description
Labels:
  • priority/p0
    |
    priority/p1
    |
    priority/p2
    |
    priority/p3
  • domain/stripe
  • type/bug
    |
    type/enhancement
    |
    type/chore
Body:
markdown
undefined
标题:
[P{0-3}] Stripe问题描述
标签:
  • priority/p0
    |
    priority/p1
    |
    priority/p2
    |
    priority/p3
  • domain/stripe
  • type/bug
    |
    type/enhancement
    |
    type/chore
正文模板:
markdown
undefined

Problem

问题

What's wrong with Stripe integration
Stripe集成存在的问题

Impact

影响

Business/security/user impact
业务/安全/用户影响

Location

位置

File:line if applicable
文件:行号(如有)

Suggested Fix

建议修复方案

Code snippet or skill to run

Created by
/log-stripe-issues
undefined
代码片段或可调用的技能

Created by
/log-stripe-issues
undefined

Priority Mapping

优先级映射

GapPriority
Missing webhook secretP0
Hardcoded keysP0
Webhook verification missingP1
No customer portalP1
Subscription status not checkedP1
No idempotency keysP2
Poor error handlingP2
CLI profile issuesP2
Advanced featuresP3
问题优先级
缺少webhook密钥P0
硬编码密钥P0
缺少webhook验证P1
无客户门户P1
未检查订阅状态P1
缺少幂等键P2
错误处理不完善P2
CLI配置文件问题P2
缺少高级功能P3

Output

输出

After running:
Stripe Issues Created:
- P0: 1 (webhook verification)
- P1: 3 (portal, subscription checks)
- P2: 2 (idempotency, error handling)
- P3: 2 (advanced features)

Total: 8 issues created
View: gh issue list --label domain/stripe
运行后输出示例:
Stripe Issues Created:
- P0: 1 (webhook verification)
- P1: 3 (portal, subscription checks)
- P2: 2 (idempotency, error handling)
- P3: 2 (advanced features)

Total: 8 issues created
View: gh issue list --label domain/stripe

Related

相关工具

  • /check-stripe
    - The primitive (audit only)
  • /fix-stripe
    - Fix Stripe issues
  • /stripe
    - Full Stripe lifecycle
  • /stripe-health
    - Webhook diagnostics
  • /groom
    - Full backlog grooming
  • /check-stripe
    - 基础工具(仅审计)
  • /fix-stripe
    - 修复Stripe问题
  • /stripe
    - 完整Stripe生命周期管理
  • /stripe-health
    - Webhook诊断
  • /groom
    - 完整待办事项梳理