Supabase Agent Skills
supabase/agent-skillsSupabase's official skills: a general Supabase skill for Auth, RLS, CLI and MCP, and a Postgres best-practices skill with 34 rule files.
Recommended
Check first Depth 3/5
Stripe AI plugin Claude skills
Stripe's official agent plugin: ten skills for integration best practices, API upgrades, Connect, Apps, Metronome and Stripe CLI workflows.
Our verdict Recommended with caveats
Well-maintained official material, but a few skills drive the Stripe CLI to provision services and send money, so keep approvals on and use a sandbox.
What Stripe AI plugin does
The stripe/ai repository ships Stripe's own SDKs for AI billing (@stripe/ai-sdk and @stripe/token-meter) and, for agents, a plugin published per client (Claude, Cursor, Antigravity and the Agent Plugins standard). The 60 skill folders in the repo are the same ten skills copied across four providers. stripe-best-practices steers integration choices: separate sandboxes for development, Checkout Sessions versus PaymentIntents, Connect, billing, tax, Treasury and key security. upgrade-stripe walks through API version, webhook and SDK upgrades. connect-recommend and connect-required-verification-information are long, question-driven guides for Connect setup and onboarding requirements. stripe-apps and metronome cover Stripe Apps extensions and usage-based billing.
Three skills act through the Stripe CLI: stripe-docs reads documentation, stripe-directory finds providers and recipients, stripe-projects provisions third-party services and credentials, and stripe-pay sends business-to-business transfers. Several skills are long, 13-28 KB, and the Connect and Stripe Apps skills carry reference folders. There are no helper scripts; the work is done by instructions and the Stripe CLI. Install with claude plugin install stripe@claude-plugins-official or npx skills add https://docs.stripe.com.
Good for
- Developers building or reviewing a Stripe integration
- Teams upgrading Stripe API versions or building Connect platforms
- Projects billing AI usage through Stripe or Metronome
Not for
- Projects that do not use Stripe
- Unattended agents with a funded Stripe account and CLI login
What's inside depth 3/5
Ten distinct skills averaging about 11 KB, with 6-12 reference files in three of them, but no helper scripts or skill-level tests.
- Skills
- 60
- Reference docs
- 156
- Scripts
- 0
- Tests / evals
- 604
- Templates
- 0
- Avg SKILL.md
- 10.7 KB
Counted from the repository file tree. How we score depth.
Dependencies and costs
- Stripe account
- Stripe CLI (stripe login) for stripe-docs, stripe-directory, stripe-projects and stripe-pay
- Metronome account for the metronome skill
- Optional remote MCP server at https://mcp.stripe.com with OAuth
Security review
Review before installingStripe's official agent skills: Connect and Billing guidance, Stripe Apps, docs lookup, a directory for finding services, project provisioning, and a stripe pay skill for sending funds to other Stripe businesses. The frontmatter pre-approves wildcard Stripe CLI commands (including stripe pay *), although the skill text requires you to confirm payments and provisioning first. The directory skill reads Stripe's online docs for setup and follows next-action commands from the CLI when you ask to provision something; the CLI itself was not reviewable.
Worth knowing
- Makes network requestsOnly if setup is incomplete, the directory skill tells the agent to read the agent-facing docs at stripe.directory and follow the documented install and authentication steps; provisioning 'next action' commands from
stripe directory searchare run only when the user asks to set something up.providers/claude/plugin/skills/stripe-directory/SKILL.md:53 - Relies on a CLI or package we could not reviewSkills drive the Stripe CLI (v1.50.9+,
stripe login,stripe docs,stripe pay,stripe provision) and its directory/projects plugins, installed via brew; the CLI code is not in the repo.providers/claude/plugin/skills/stripe-docs/SKILL.md:9 - Installs packages or toolsAllowed commands include
brew install/upgrade stripe/stripe-cli/stripeandnpx skills add https://docs.stripe.com *; stripe-projects provisions third-party services and retrieves their API keys into your project.providers/claude/plugin/skills/stripe-projects/SKILL.md:18 - Makes network requestsSkills call Stripe docs endpoints with curl, use the Stripe API with your keys (sent to api.stripe.com), the Stripe CLI, Metronome's API, and the optional remote MCP server at https://mcp.stripe.com via OAuth.providers/claude/plugin/skills/connect-required-verification-information/SKILL.md:176
- Needs an API key for its own serviceExamples and skills use STRIPE_API_KEY / restricted keys and Metronome keys, sent only to Stripe and Metronome; the best-practices reference says never to log or embed keys.providers/agent-plugins/plugin/skills/stripe-apps/references/authentication.md:37
What we checked
The repository (1090 files) on Oct 29, 2026. Not a full review: 882 of 1090 files were not downloaded (large repository; we reviewed the skill folders); it relies on code outside the repository: Stripe CLI and its directory, projects and pay plugins; Stripe hosted MCP server (mcp.stripe.com); stripe.directory and docs.stripe.com content fetched at run time; About 880 of the 1,090 repo files (plugin manifests, MCP configs, other skill copies and the Metronome/Connect skills) are not in our copy.
NVIDIA SkillSpector static scan: 86 pattern hits (Agent Snooping 44, Privilege Escalation 16, MCP Rug Pull 6, System Prompt Leakage 4, YARA Match 4, Prompt Injection 4). Hits are doc text: Connect rules such as 'always recommend Accounts v2', 'without confirmation' in a tax reference, access-token explanations in the Stripe Apps references, skill cross-references, and Stripe API URLs. The repo has no scripts; skills are mirrored under providers/{agent-plugins,claude,cursor,antigravity}.
A review, not a certification. Skills change after we check them — read the files before installing.
License
MIT — commercial use allowed.
Can it run unattended?
Not really. The skills are decision guides and CLI wrappers that repeatedly ask the user to confirm choices, and the money-moving skill requires explicit confirmation.
Skills in this repository
| Skill | Installs |
|---|---|
| stripe-best-practices | 100K |
| upgrade-stripe | 74K |
| stripe-projects | 70K |
Linked skills have their own review.
Alternatives to Stripe AI plugin
Cloudflare Skills
cloudflare/skillsCloudflare's official 19-skill pack for building on Workers, Durable Objects, the Agents SDK, Cloudflare One and more, with an optional bundled MCP server.
Recommended
Check first Depth 4/5
Vercel Agent Skills
vercel-labs/agent-skillsVercel's official 9-skill pack: React and Next.js performance rules, composition patterns, UI and writing review, React Native, deploy and cost audit.
Recommended
Broad access Depth 3/5
FAQ
What is the Stripe AI plugin for Claude Code?
It is Stripe's official plugin from the stripe/ai repository, bundling ten skills for Stripe integration guidance and Stripe CLI workflows. The same repo also contains Stripe's AI billing SDKs.
How do I install the Stripe plugin?
In Claude Code run claude plugin install stripe@claude-plugins-official. Codex uses codex plugin add stripe@openai-curated and Cursor uses /add-plugin stripe. For other agents, run npx skills add https://docs.stripe.com, and note that manual installs do not auto-update.
Can the Stripe skills move real money?
The stripe-pay skill wraps the stripe pay CLI command for business-to-business transfers. Its instructions require an explicit user request, showing the exact command and getting confirmation before passing -y. Use sandbox keys and review commands anyway.
Stripe skills vs the Stripe MCP server?
The skills are instructions and CLI workflows for choosing how to build, while the MCP server at mcp.stripe.com gives agents direct API tools through OAuth. Stripe's README lists both and they can be used together.
Sources: GitHub repository (stars, license, file tree, last push Oct 29, 2026); install counts from skills.sh via Best Skills (CC BY 4.0). Review based on the README and SKILL.md files as published.