← Back to Skills Marketplace
Stripe API Actions
by
Stanislav Stankovic
· GitHub ↗
· v1.0.0
· MIT-0
58
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install stripe-api-actions
Description
Use Stripe's live REST API for authenticated write actions. Use when you need to create or update Stripe customers, products, prices, payment links, refunds,...
Usage Guidance
This skill appears to do exactly what it says (perform Stripe write operations) and the code only talks to api.stripe.com, but the registry metadata fails to declare the required secret. Before installing: (1) verify the skill author/source — there's no homepage and owner is unknown; (2) do not supply a live unrestricted Stripe secret until you audit the code yourself; (3) prefer using a restricted key or a test key scoped to only the needed write actions while evaluating; (4) confirm the platform/registry metadata is updated to declare STRIPE_SECRET_KEY as the primary credential; (5) review the script (it's included) to ensure it meets your safety policies and that --confirm behavior fits your automation needs; (6) monitor Stripe audit logs and be prepared to rotate keys if anything unexpected occurs.
Capability Analysis
Type: OpenClaw Skill
Name: stripe-api-actions
Version: 1.0.0
The skill provides a legitimate and transparent interface for interacting with the Stripe API to perform write operations like creating customers and processing refunds. It follows security best practices by requiring a mandatory --confirm flag for all write actions, using environment variables for secret management (STRIPE_SECRET_KEY), and relying solely on Python standard libraries (urllib) without external dependencies or obfuscation. The logic in scripts/stripe_actions.py is strictly limited to the official Stripe API endpoint (api.stripe.com).
Capability Tags
Capability Assessment
Purpose & Capability
Name, description, SKILL.md and the included script all align: the skill performs authenticated Stripe write actions (customers, products, prices, refunds, subscriptions, metadata). The code implements only Stripe API calls and matches the stated purpose. However, the registry metadata lists no required environment variables or primary credential despite SKILL.md and the script clearly requiring STRIPE_SECRET_KEY — this metadata omission is noteworthy.
Instruction Scope
SKILL.md instructs the operator to set STRIPE_SECRET_KEY and to require --confirm for writes. The included script enforces --confirm and only talks to api.stripe.com. There is no instruction or code that reads unrelated files, contacts other external endpoints, or exfiltrates data. The concern is that the runtime instructions access an environment secret (STRIPE_SECRET_KEY) that the registry did not declare; the instructions therefore reference resources outside the declared surface.
Install Mechanism
No install spec; skill is instruction-only with a bundled Python helper script. Nothing is downloaded at install time and no archives are extracted. This is low-risk from installation mechanism perspective.
Credentials
The script and SKILL.md require STRIPE_SECRET_KEY in the environment, and that key is the primary credential needed for write access. But the registry metadata lists no required env vars and no primary credential. This mismatch is disproportionate and could lead to accidental exposure if users aren't warned; the skill should declare STRIPE_SECRET_KEY (and ideally recommend using restricted/test keys).
Persistence & Privilege
The skill does not request always:true, does not modify other skills' configs, and has no install-time persistence. Autonomous invocation is allowed (platform default) but is not combined with other privilege escalation indicators here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stripe-api-actions - After installation, invoke the skill by name or use
/stripe-api-actions - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: authenticated Stripe write-action skill for customers, products, prices, payment links, refunds, subscription cancellation, and metadata updates.
Metadata
Frequently Asked Questions
What is Stripe API Actions?
Use Stripe's live REST API for authenticated write actions. Use when you need to create or update Stripe customers, products, prices, payment links, refunds,... It is an AI Agent Skill for Claude Code / OpenClaw, with 58 downloads so far.
How do I install Stripe API Actions?
Run "/install stripe-api-actions" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Stripe API Actions free?
Yes, Stripe API Actions is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Stripe API Actions support?
Stripe API Actions is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Stripe API Actions?
It is built and maintained by Stanislav Stankovic (@stanestane); the current version is v1.0.0.
More Skills