mobile-checkout

mobile-checkout is a skill for Claude Code, Codex from dodopayments/skills. It costs 69 tokens per session (2,205 once invoked), scanned A, original, MIT.

A guide for adding Dodo Payments hosted checkout to mobile apps built with React Native, Flutter, iOS, or Android. Checkout opens in a secure system browser, while the backend creates the payment session.

In plain words
What is it for?
Use it to add payment return links, handle abandoned checkouts, create checkout sessions, and confirm payments through webhooks or the payment API.
Why use it?
It keeps payment credentials out of the app and avoids treating the mobile result as proof of payment. The server verifies payment before granting access.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to add payment return links, handle abandoned checkouts, create checkout sessions, and confirm payments through webhooks or the payment API.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/dodopayments/skills/mobile-checkout
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add dodopayments/skills --skill mobile-checkout
Clone the repo
git clone --depth 1 https://github.com/dodopayments/skills

Made for: Claude Code, Codex.

Its marketplace also offers this one on its own, as the plugin mobile-checkout — /plugin install mobile-checkout after adding the marketplace above.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mobile-checkout

README.md
[![agentmods](https://agentmods.dev/badge/skills/dodopayments/skills/mobile-checkout/github.svg)](https://agentmods.dev/skills/dodopayments/skills/mobile-checkout)
Your own site
<a href="https://agentmods.dev/skills/dodopayments/skills/mobile-checkout"><img src="https://agentmods.dev/badge/skills/dodopayments/skills/mobile-checkout/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mobile-checkout

Your own site · 80×15
<a href="https://agentmods.dev/skills/dodopayments/skills/mobile-checkout"><img src="https://agentmods.dev/badge/skills/dodopayments/skills/mobile-checkout.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 69 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,205 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00069 $0.02205
Opus 5.5 $0.00028 $0.00882
Sonnet 5.5 $0.00014 $0.00441
Haiku 4.5 $0.00007 $0.00220

Measured 19d ago against content hash e75312e41970, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mobile-checkout scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

dodo-payments/mobile-checkout/SKILL.md · 284 lines

How it starts

The opening of the file, as written. The whole thing — 284 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Mobile In-App Checkout

This skill covers integrating Dodo Payments hosted checkout into native and cross-platform mobile apps using secure system browser contexts.

When to use this skill

  • Building a React Native app with Turbo Module checkout integration
  • Adding checkout to a Flutter app via native bridge
  • Implementing native iOS or Android checkout with secure browser contexts
  • Registering custom URL schemes and deep links for payment return
  • Handling abandoned checkout sessions and recovery flows
  • Confirming payment authority server-side before granting access

Core principle: Backend creates, mobile opens

Your backend creates the checkout session and returns a URL. The mobile app opens that URL in a secure browser context. Your API key must never be embedded in the app binary. The mobile SDK result is informational only; always verify the payment server-side via webhook or API before unlocking features or granting access.

Architecture overview

  1. Backend: Create a checkout session via client.checkoutSessions.create(...) and return the checkout_url to your mobile app.
  2. Mobile app: Call the platform-specific SDK with the checkout URL and a registered return URL scheme.
  3. Browser context: The SDK opens the URL in a secure system browser: SFSafariViewController on iOS and Chrome Custom Tabs on Android.
  4. Return: After payment, the browser navigates to your return URL. The SDK captures the result and passes it to your app.
  5. Verification: Query the checkout session or listen for a webhook to confirm the payment before granting access.

React Native (Turbo Module)

Full guide: references/react-native.md.

Covers:

  • Installation
  • Setup
  • Starting checkout
  • Abandoned session recovery
  • Android minSdk requirement

Flutter

Full guide: references/flutter.md.

Covers:

  • Installation
  • Setup
  • Starting checkout
  • Return URL registration

iOS (native)

Full guide: references/ios.md.

Read the full file on GitHub · 284 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 19d ago Changed · -238 lines · +41 tokens per session e75312e41970
  2. 1mo ago First seen · 522 lines · 28 tokens per session scan A 43b81403dccd

Subscribe to this mod's changes

mobile-checkout is a skill published in the GitHub repository dodopayments/skills (13 stars, last pushed yesterday), licensed MIT. It adds 69 tokens to every session and 2,205 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

play-billing-library-version-upgrade

Use this skill when upgrading or migrating an Android project from any legacy Google Play Billing Library (PBL) version to the latest stable version of PBL.

android/skills · 39 tokens

loom-dart

Dart language expertise for idiomatic, production-quality code.

cosmix/loom · 16 tokens

capacitor-best-practices

Review and set up Capacitor apps against current best practices (Capacitor 8.5 stable, 9 alpha via @next). Use for a Capacitor codebase review, capacitor.config.ts audit, new project setup, aligning @capacitor/core/cli/ios/android and plugin majors, plugin patterns (availability checks…

Cap-go/capgo-skills · 248 tokens

capacitor-plugins

Pick, install, and wire up Capacitor plugins for native features (camera, filesystem, geolocation, biometrics, in-app purchases, social login, SQLite, calendar, contacts, health, BLE, NFC, etc.). Covers official @capacitor/ packages (Capacitor 8.5 stable, 9 alpha on next) plus the 145-package @capgo/ index, native…

Cap-go/capgo-skills · 239 tokens

capgo-live-updates

Sets up and debugs Capgo live (OTA) updates in a Capacitor app with @capgo/capacitor-updater. Use when the user wants to ship web-layer fixes without app store review, install or configure the updater plugin, choose an autoUpdate mode, call notifyAppReady, wire manual download/next/set flows, set channels from the…

Cap-go/capgo-skills · 155 tokens

capgo-native-builds

Use for Capgo Cloud Build (Capgo Build) native iOS and Android workflows, including CLI login and API-key precedence, build init onboarding, signing credential save/update/export, build request with TestFlight, App Store, or Play upload, temporary IPA/APK/AAB download links (--output-upload), prescan failures, build…

Cap-go/capgo-skills · 168 tokens