Stripe Webhook Replay Lab

Replay signed Stripe webhook payloads to a local or staging endpoint for idempotency and retry debugging.

This script does what it says: it signs a JSON payload with your Stripe webhook secret and posts it to the URL you provide. Before running: (1) Inspect the included script (you already have it) and confirm you are comfortable with it. (2) Do NOT use a production webhook secret or production customer data — prefer test secrets and local/staging endpoints. (3) Be careful what URL you set: the tool will send the payload to any URL, so don't point it at untrusted external endpoints (it could leak test data). (4) Note the registry metadata omission: the package did not declare required env vars; expect to set STRIPE_WEBHOOK_URL and STRIPE_WEBHOOK_SECRET when running. If you need higher assurance, run the script in an isolated environment or container and avoid supplying production secrets.

Type: OpenClaw Skill Name: stripe-webhook-replay-lab Version: 1.0.0 The skill is a utility for testing Stripe webhook idempotency by replaying signed JSON payloads to a user-specified endpoint. It correctly implements the Stripe signature scheme using openssl and curl, and uses python3 for safe JSON parsing and input validation. No evidence of data exfiltration, malicious execution, or unauthorized access was found in scripts/replay-stripe-webhook.sh or the accompanying documentation.