跳到主要内容
知知仓学习社ZHICANG

payment-integration

Integrate payments with SePay (VietQR), Polar, Stripe, Paddle (MoR subscriptions), Creem.io (licensing). Checkout, webhooks, subscriptions, QR codes…

读凭据联网执行命令严重 5 · 高危 8mrgoonie/claudekit-skills

它会碰到什么

扫了多少43 个文本文件，242 KB
它会碰到什么读凭据联网执行命令
命中总数40 处
命中统计严重 5 · 高 8 · 中 0 · 低 16
逐条看命中（13 条严重或高危）
  • 严重 README.md:66cred-paths
    └── .env.example              # Environment variable template
  • 严重 README.md:111cred-paths
    Copy `.env.example` to `.env` and configure:
  • 严重 README.md:111cred-paths
    Copy `.env.example` to `.env` and configure:
  • 严重 references/creem/sdk.md:154cred-paths
    # .env
  • 严重 references/sepay/sdk.md:157cred-paths
    **Configuration (.env):**
  • 高 scripts/checkout-helper.js:202cred-envread
    config.merchantId = config.merchantId || process.env.SEPAY_MERCHANT_ID;
  • 高 scripts/checkout-helper.js:203cred-envread
    config.secretKey = config.secretKey || process.env.SEPAY_SECRET_KEY;
  • 高 scripts/checkout-helper.js:204cred-envread
    config.env = config.env || process.env.SEPAY_ENV || 'sandbox';
  • 高 scripts/checkout-helper.js:216cred-envread
    config.accessToken = config.accessToken || process.env.POLAR_ACCESS_TOKEN;
  • 高 scripts/checkout-helper.js:217cred-envread
    config.server = config.server || process.env.POLAR_SERVER || 'production';
  • 高 scripts/polar-webhook-verify.js:158cred-envread
    const secret = args[1] || process.env.POLAR_WEBHOOK_SECRET;
  • 高 scripts/sepay-webhook-verify.js:159cred-envread
    const authType = process.env.SEPAY_WEBHOOK_AUTH_TYPE || 'none';
  • 高 scripts/sepay-webhook-verify.js:160cred-envread
    const apiKey = process.env.SEPAY_WEBHOOK_API_KEY || null;

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

Payment Integration

Production-proven payment processing with SePay (Vietnamese banks), Polar (global SaaS), Stripe (global infrastructure), Paddle (MoR subscriptions), and Creem.io (MoR + licensing).

When to Use

  • Payment gateway integration (checkout, processing)
  • Subscription management (trials, upgrades, billing)
  • Webhook handling (notifications, idempotency)
  • QR code payments (VietQR, NAPAS)
  • Software licensing (device activation)
  • Multi-provider order management
  • Revenue splits and commissions

Platform Selection

| Platform | Best For |

|----------|----------|

| SePay | Vietnamese market, VND, bank transfers, VietQR |

| Polar | Global SaaS, subscriptions, automated benefits (GitHub/Discord) |

| Stripe | Enterprise payments, Connect platforms, custom checkout |

| Paddle | MoR subscriptions, global tax compliance, churn prevention |

| Creem.io | MoR + licensing, revenue splits, no-code checkout |

Quick Reference

SePay

  • references/sepay/overview.md - Auth, supported banks
  • references/sepay/api.md - Endpoints, transactions
  • references/sepay/webhooks.md - Setup, verification
  • references/sepay/sdk.md - Node.js, PHP, Laravel
  • references/sepay/qr-codes.md - VietQR generation
  • references/sepay/best-practices.md - Production patterns

Polar

  • references/polar/overview.md - Auth, MoR concept
  • references/polar/products.md - Pricing models
  • references/polar/checkouts.md - Checkout flows
  • references/polar/subscriptions.md - Lifecycle management
  • references/polar/webhooks.md - Event handling
  • references/polar/benefits.md - Automated delivery
  • references/polar/sdk.md - Multi-language SDKs
  • references/polar/best-practices.md - Production patterns

Stripe

  • references/stripe/stripe-best-practices.md - Integration design
  • references/stripe/stripe-sdks.md - Server SDKs
  • references/stripe/stripe-js.md - Payment Element
  • references/stripe/stripe-cli.md - Local testing
  • references/stripe/stripe-upgrade.md - Version upgrades
  • External: https://docs.stripe.com/llms.txt

Paddle

  • references/paddle/overview.md - MoR, auth, entity IDs
  • references/paddle/api.md - Products, prices, transactions
  • references/paddle/paddle-js.md - Checkout overlay/inline
  • references/paddle/subscriptions.md - Trials, upgrades, pause
  • references/paddle/webhooks.md - SHA256 verification
  • references/paddle/sdk.md - Node, Python, PHP, Go
  • references/paddle/best-practices.md - Production patterns
  • External: https://developer.paddle.com/llms.txt

Creem.io

  • references/creem/overview.md - MoR, auth, global support
  • references/creem/api.md - Products, checkout sessions
  • references/creem/checkouts.md - No-code links, storefronts
  • references/creem/subscriptions.md - Trials, seat-based
  • references/creem/licensing.md - Device activation
  • references/creem/webhooks.md - Signature verification
  • references/creem/sdk.md - Next.js, Better Auth
  • External: https://docs.creem.io/llms.txt

Multi-Provider

  • references/multi-provider-order-management-patterns.md - Unified orders, currency conversion

Scripts

  • scripts/sepay-webhook-verify.js - SePay webhook verification
  • scripts/polar-webhook-verify.js - Polar webhook verification
  • scripts/checkout-helper.js - Checkout session generator

Key Capabilities

| Platform | Highlights |

|----------|------------|

| SePay | QR/bank/cards, 44+ VN banks, webhooks, 2 req/s |

| Polar | MoR, subscriptions, usage billing, benefits, 300 req/min |

| Stripe | CheckoutSessions, Billing, Connect, Payment Element |

| Paddle | MoR, overlay/inline checkout, Retain (churn prevention), tax |

| Creem.io | MoR, licensing, revenue splits, no-code checkout |

Implementation

See references/implementation-workflows.md for step-by-step guides per platform.

General flow: auth → products → checkout → webhooks → events

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库mrgoonie/claudekit-skills
星标★ 2,216
本站分层T1
该仓技能数45
原文件路径.claude/skills/payment-integration/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 45 个技能