SKILL.md
Stripe Webhooks
When to Use This Skill
- Setting up Stripe webhook handlers
- Debugging signature verification failures
- Understanding Stripe event types and payloads
- Handling payment, subscription, or invoice events
Verification (core)
Stripe ships official SDK helpers that verify the Stripe-Signature header (HMAC-SHA256 over timestamp.body) and parse the event in one call. Pass the raw request body — don't JSON.parse first.
Node:
const stripe = require('stripe')(process.env.STRIPE_SECRET_KEY);