Search everything...

Stats

Actions

Available In

web-commerce

Web commerce integration specialist — scaffolds production-ready payment/commerce backends (Stripe, Square, or Shopify; one per site) into static or JS-framework sites at full depth: catalog, cart, hosted/embedded checkout, verified webhooks, idempotency, POS/inventory reconciliation, and order handling. Three first-class provider tracks behind a thin shared payment-lifecycle contract — NOT a leaky unified adapter. Generates first-party code (no dormant/deprecated deps), with PCI card-isolation, webhook signature verification, idempotency, and env-only secrets as GENERATED-CODE invariants. The backend-integration lane that plugs into web-design's build pipeline; every payment/PII security verdict routes to ravenclaude-core/security-reviewer. Inherits ravenclaude-core protocols.

Publisher marketplaceweb-commerce@ravenclaude · marketplace and plugin share one repository (mcorbett51090/ravenclaude)

npx claudepluginhub mcorbett51090/ravenclaude --plugin web-commerce

Popularity

Stars

Above avg

Med: 0·Avg: 860

Copy clicks

Med: 0·Avg: 2

What's Inside

Slash Commands1

scaffold-commerce

/scaffold-commerce

Guided commerce integration: pick a provider (Stripe/Square/Shopify) and tier (static/framework), scaffold the templates into the site, wire webhooks + idempotency + env, then run the gold-standard rubric checks. The one-command entry point for adding payments to a site.

Agents4

commerce-integration-engineer

/commerce-integration-engineer

Use to scaffold a chosen commerce provider track (Stripe/Square/Shopify, static or framework) into a site from the templates — wiring checkout, webhooks, idempotency, and env config. Runs AFTER commerce-provider-selector. The security verdict routes to ravenclaude-core/security-reviewer.

commerce-provider-selector

/commerce-provider-selector

Use to choose the commerce provider (Stripe/Square/Shopify) and tier (static hosted vs framework embedded) for a site and record it in commerce.manifest.json — the first step before scaffolding. NOT the site/checkout UX (web-design) or the scaffold build (commerce-integration-engineer).

commerce-webhook-security-reviewer

/commerce-webhook-security-reviewer

Use to audit a scaffolded or hand-modified commerce integration for the security invariants — PCI card-isolation, constant-time webhook verification, idempotency, env-only secrets. Proposes fixes; the binding verdict stays ravenclaude-core/security-reviewer's. Run before shipping any payment change.

pos-reconciliation-engineer

/pos-reconciliation-engineer

Use to build or debug the Square online↔in-store inventory reconciliation loop — catalog/inventory webhooks, one-way POS-as-source-of-truth sync, event-id idempotency. Square-only (Shopify inverts, Stripe has no catalog). NOT for payment checkout wiring (commerce-integration-engineer).

Skills5

commerce-gold-standard-rubric

/commerce-gold-standard-rubric

Score a scaffolded commerce integration against the seven-dimension gold-standard rubric and run the BUILD-measure-fix iteration loop until it passes. Use after scaffolding a provider track, before calling it done. Each dimension is a falsifiable test; a live provider-sandbox test is required beyond the static checks.

payment-lifecycle-contract

/payment-lifecycle-contract

Understand and extend the thin shared contract every provider track implements — the payment-lifecycle interface plus advertised capabilities. Use when adding a provider, wiring a track to the contract, or deciding what belongs in the shared seam vs a track. The ONLY cross-provider abstraction; catalog/cart/inventory are track-specific.

pos-reconciliation-loop

/pos-reconciliation-loop

Reconcile online inventory/catalog with an in-store POS (Square), keeping the POS as the source of truth. Use when a storefront's online store must mirror in-store stock. One-way sync driven by catalog/inventory webhooks, de-duped by event id — never bidirectional. Square-specific; Shopify inverts and Stripe has no catalog.

provider-track-selection

/provider-track-selection

Choose the commerce provider (Stripe / Square / Shopify) and the tier (static hosted-checkout vs framework embedded-SDK) for a site, then point at the right template set. Use at the START of any commerce integration, before scaffolding. Routes on how the merchant's inventory truth already lives and the site's runtime.

webhook-hardening

/webhook-hardening

Harden a commerce webhook handler: verify the provider signature with a constant-time compare BEFORE parsing the body, then de-duplicate retried deliveries by provider event id. Use when writing or reviewing any Stripe/Square/Shopify webhook receiver. Two invariants (verify-before-parse, event-id idempotency) that are non-negotiable.

Stats

Version0.1.1

LanguageHTML

Stars4

Forks1

MaintenanceGood

LicenseMIT

Last CommitJul 14, 2026

AddedJul 18, 2026

Actions

View on GitHub View README Plugin Marketplace JSON Homepage

Own this plugin?

Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).

Available In

ravenclaude4

Safety Signals

Caution

Uses power tools

Uses Bash, Write, or Edit tools

README

🐦‍⬛ RavenClaude

A private Claude Code plugin marketplace — bundled team rules, specialist agents, dispatch playbooks, and templates that travel with you across projects.

🚀 ▶ See what RavenClaude is (pitch.html) — the one-page pitch: the value prop, the proof, and the plugin catalog at a glance. Start here. (Or view the raw HTML source, or download and open locally — no server, no build step.)

🏠 ▶ Open the landing page (index.html) rendered in your browser — the front door: a navigable home with the plugin catalog, the specialist roster, and a comfort-posture starter. Regenerated from the manifests on every release.

(Or view the raw HTML source, or download and open locally — no server, no build step.)

🎛 ▶ Open the RavenClaude dashboard — point-and-click editor for your .ravenclaude/comfort-posture.yaml: set per-tool file, network, shell, and package autonomy across three levels (deny → ask → allow) — per layer (user / local / project) and per individual permission — without editing YAML by hand. (That link is the published, read-only preview; to use it for real — where Save & apply writes your repo's config — run rc dashboard from your project, the one canonical launcher across Claude Code, Copilot CLI, and a bare terminal.)

🖥 Working on this repo? Launch the functional local dashboard (where Save & apply actually writes this repo's config) with one command: bash scripts/open-dashboard.sh. It kills any running dashboard server, starts a fresh one, and opens it in your browser automatically. (VS Code users: a .vscode/tasks.json wired as the default build task — Ctrl/Cmd+Shift+B — runs the same script; .vscode/ is gitignored, so add it locally if you want the keybinding.)

📖 ▶ Open the RavenClaude portal — one self-contained page: browse every plugin, agent, skill, hook, rule, and template in the Marketplace section (with an “I want to…” use-case lookup), tune the comfort-posture Dashboard, and more. Regenerated from the manifests on every release.

(Or view the raw HTML source, or download and open locally — no server, no build step.)

🚀 ▶ First Workflow in 10 Minutes — install → dashboard → one governed multi-agent dispatch → /wrap. The canonical onboarding walkthrough. Start here if you've never used RavenClaude before.

🌐 ▶ Raven Power ↗ — the consulting front door behind RavenClaude. This marketplace is the proof-of-craft; the website is where the engagements live.

Today this marketplace ships 164 plugins:

ravenclaude-core — domain-neutral Team Lead + 14 specialists (architect, coders, reviewers, designer, documentarian, deep-researcher, project-manager, partner-success-manager, prompt-engineer, data-engineer, etc.), plus dispatch playbooks (with a Cross-plugin dispatch section), gates, 43 skills, 16 hooks, templates, and the cross-project contribution-staging loop.
power-platform — 11 Microsoft Power Platform specialists (Power Fx, flows, Power BI, Dataverse, model-driven, PCF, Copilot Studio, Power Pages, admin, ALM, tester), 21 skills, an advisory house-opinions hook covering 8 checks, and the bundled pbix-mcp MCP server.
finance — 7 corporate-finance & FP&A specialists (FP&A analyst, financial modeler, controller, treasury, valuation, audit-prep, board-pack composer), 9 skills, templates, advisory anti-pattern hook.
regulatory-compliance — 12 financial-regulatory specialists (6 function: AML/KYC, regulatory reporting, risk-and-controls, policy & procedure writer, examination prep, Bermuda-insurance; plus 6 jurisdiction: BMA, CIMA Cayman, Bahamas, Channel Islands, UK PRA, US), 10 skills, templates, defensive PII-scrub hook.
web-design — 7 web specialists (web architect, UX, visual, frontend implementer, content strategist, accessibility auditor, performance engineer) with WCAG 2.2 AA/AAA, Core Web Vitals, SEO/AEO, and Fluent + React discipline. 11 skills, templates, advisory web anti-pattern hook.
edtech-partner-success — 6 K-12 EdTech partner-success specialists (partner-success manager, success-playbook designer, learning-analytics analyst, QBR composer, partner-profile curator, FERPA comms translator) with 16 skills and a knowledge bank of operating cadences.

View full README on GitHub

More by mcorbett51090

generative-web-media

4·

AI multimedia for brand & winery sites: a creative brief -> on-brand, web-optimized, license-clean images/video/3D/audio behind a mandatory human curation gate. 4 agents (generation-strategist, web-asset-pipeline-engineer, asset-provenance-guardian, brand-and-accessibility-reviewer) route a brief to the right generator (provider-neutral, Grok-lean for images where competitive; inpaint/outpaint/bg-removal/upscale first-class), turn raw output into AVIF/WebP responsive <picture> markup with LCP/CLS-safe embeds, pin commercial-use licenses (flags the FLUX-dev non-commercial trap; C2PA + a provenance ledger; EU AI Act Art.50 disclosure), and gate every asset on brand-hex/style conformance + WCAG alt text before ship. 6 skills, 4 knowledge docs (Mermaid decision trees; all prices [unverified]), 6 best-practices, 4 commands, 5 templates, 4 scripts. The shared foundation the brand-identity-studio plugin consumes. Declarative fal MCP binding (set FAL_KEY). Requires ravenclaude-core@>=0.7.0.

v0.1.1

mcorbett51090

finance

4·

Corporate finance & FP&A specialist team — FP&A analyst, financial modeler, controller, treasury analyst, valuation analyst, audit-prep specialist, and board-pack composer. Ships 23 skills including the controller-autopilot: a governed close-to-report cycle (GAAP statements, COA mapping, reconciliation auto-match, review→approve→lock workflow, ELT staging, consolidation, per-entity dashboard, close schedules) plus its live-integration tier (multi-currency remeasurement + CTA, OAuth GL connectors + drill-through lineage, warehouse/RLS dashboard, IdP-backed segregation of duties) and a gold-standard NetSuite close (OAuth2 M2M + SuiteQL BS/IS trial balance, COA-draft, tie-out doctor, changed-after-sign-off drift, layperson runbook). 10 templates, a knowledge bank, and 2 advisory hooks (anti-patterns + secrets/PII scan). Inherits ravenclaude-core protocols (Grounding, Structured Output, Cited-Adjudicator).

v0.18.3

mcorbett51090

power-platform

4·1·

Power Platform specialist team — 11 agents (incl. power-platform-tester, power-bi-engineer) and 23 skills, with strong ALM/git coverage for solutions, flows, and PBIP. A house-opinions hook flags 8 §3/§4 violations; the knowledge bank carries production decision trees (PA-flow recovery, Dataverse token-acquisition, PCF React surface, PBI deploy/refresh, custom-connector build-path, PBIR Enhanced infinite-spinner debug + full build reference, DAX silent-zero scoring via the `Domain` pattern, sempy.fabric notebook reference, Power BI Copilot report-readiness, Code Apps connector gotchas, PBIP deployment variables + #839, PBIR reference enrichment, PBIP report fast-solve triage router [MCP-optional]) plus a real-engagement scenarios bank. Bundles the community pbix-mcp server (d0nk3yhm/pbix-mcp, MIT) for .pbix/.pbit read/write/DAX-eval (`pip install pbix-mcp`); documents (not bundles) the official Microsoft Dataverse MCP (CLAUDE.md §9a). Extends ravenclaude-core.

v0.44.7

mcorbett51090

project-management

4·

Project & delivery management team — four specialists across the predictive (PMBOK/PMP) and agile (Scrum/Kanban) tracks and the hybrid between: delivery-lead (charter, schedule, scope/change control, earned value), scrum-master (backlog, sprints, ceremonies, velocity, impediments), risk-and-raid-analyst (scored qual+quant risk, RAID depth, mitigation/contingency, issue triage), and stakeholder-comms-lead (stakeholder register, comms plan, status/exec reporting, escalation memos, steering packs). Deepens — does NOT replace — ravenclaude-core's domain-neutral project-manager (the lightweight RAID/status-hygiene default every plugin routes to); this is the deep PM craft layer. Knowledge: a predictive-vs-agile-vs-hybrid decision tree + a best-practices library. Seams: prose polish → ravenclaude-core/documentarian; system design → architect. Requires ravenclaude-core@>=0.7.0.

v0.4.1

mcorbett51090

ai-red-teaming

4·

AI/LLM red-teaming team — 2 agents (ai-redteam-lead, adversarial-testing-engineer) for the layer answering 'can this AI system be made to do harm, leak data, or exceed its authority — and how do we harden it?': threat modeling + rules of engagement, the attack taxonomy (OWASP LLM Top 10 2025 + MITRE ATLAS), direct vs indirect prompt injection, jailbreaks (roleplay/encoding/many-shot/crescendo), data exfiltration & training-data extraction, agentic tool-abuse / excessive agency, multimodal attacks, and defense-in-depth remediation. Fluent in automated red-team harnesses (PyRIT, Garak, Promptfoo red-team, Giskard) and likelihood×impact severity. 3 skills, a 2-doc knowledge bank (attack-taxonomy decision tree + 2026 patterns), and 2 templates. Distinct from llm-evaluation-engineering (quality-regression eval), trust-and-safety (content-moderation / T&S policy), and security-engineering (app/infra pentest) — the adversarial AI-security layer over model- and agent-based systems. Requires ravenclaude-core@>=0.7.0.

v0.2.0

mcorbett51090

web-commerce

Popularity

What's Inside

Confidence

README

🐦‍⬛ RavenClaude

Similar Plugins

fullstack-dev-skills

ecc

context7

claude-council

More by mcorbett51090

generative-web-media

finance

power-platform

project-management

ai-red-teaming

🐦‍⬛ RavenClaude

Popularity

Health & Quality

More by mcorbett51090

generative-web-media

finance

power-platform

project-management

ai-red-teaming

Similar Plugins

fullstack-dev-skills

ecc

context7

claude-council

startup-business-analyst

octo