← Back to Skills Marketplace
abdul-karim-mia

Gumroad Pro

by abdul-karim-mia · GitHub ↗ · v1.2.9
cross-platform ✓ Security Clean
1547
Downloads
1
Stars
0
Active Installs
8
Versions
Install in OpenClaw
/install gumroad-pro
Description
Comprehensive Gumroad merchant management including product catalogs, sales intelligence, recurring subscription oversight, license key management, and finan...
README (SKILL.md)

Gumroad Pro

🛑 AI PROTOCOL

  1. PRIORITIZE HANDLER: Always attempt to use the interactive button-based GUI (handled by handler.js) for the best merchant experience.
  2. CLI AS FALLBACK: Only use scripts/gumroad-pro.js via the CLI for complex data retrieval or specific actions not available in the GUI.
  3. USE --json: When using the CLI, ALWAYS use the --json flag and check for "success": true.
  4. REDUCE SPAM: Use action: 'edit' in renderResponse for all menu transitions and state updates. Only use action: 'send' for the initial menu or when the context fundamentally changes.
  5. HANDLE ERRORS: Read the "error" field in JSON responses to inform the user of failures.

❓ Navigation & Data

  • Primary Interaction: Use the adaptive logic in handler.js. See handler-guide.md for interaction patterns, ui-rendering.md for rendering protocols, and changelog.md for version history. Respond with button callback data (e.g., gp:products) or digits (1, 2, 3) where applicable.
  • Secondary Interaction: Use scripts/gumroad-pro.js for direct actions. See api-reference.md for command specs.

🔑 Authentication

The skill requires a Gumroad API Key. It looks for the following environment variables (in order of preference):

  1. GUMROAD_ACCESS_TOKEN
  2. API_KEY

Configuration

You can set this in your ~/.openclaw/openclaw.json using the apiKey convenience field:

{
  "skills": {
    "entries": {
      "gumroad-pro": {
        "enabled": true,
        "apiKey": "YOUR_GUMROAD_TOKEN"
      }
    }
  }
}

The platform will automatically inject your apiKey into the preferred GUMROAD_ACCESS_TOKEN variable.

🛠️ Workflows

Product Inventory

  • List all digital assets to monitor sales and availability.
  • Toggle publication status or delete obsolete items.
  • View detailed product commands.

Sales & Fulfillment

Licensing

Offer Management


Developed for the OpenClaw community by Abdul Karim Mia.

Usage Guidance
This skill appears to do what it claims: it needs your Gumroad API token and will call api.gumroad.com to manage products, sales, licenses, discounts, payouts, and webhooks. Before installing: 1) Provide a Gumroad token with the minimum required scope and avoid reusing sensitive tokens for other services; 2) Be aware that creating webhooks via the tool will register external URLs that will receive event payloads (don’t point webhooks at endpoints you don’t control); 3) Note there is executable JavaScript bundled (handler.js and a CLI) — inspect the code or review the linked GitHub repo to satisfy yourself about the author and updates; 4) If you need stricter controls, rotate the token after testing or create a token dedicated to this skill.
Capability Analysis
Type: OpenClaw Skill Name: gumroad-pro Version: 1.2.9 The skill provides comprehensive Gumroad merchant management, interacting with the legitimate `api.gumroad.com` via `https`. Both `handler.js` and `scripts/gumroad-pro.js` use `URLSearchParams` and `encodeURIComponent` for all parameters, mitigating API injection risks. A previous security vulnerability (use of `spawnSync`) was explicitly removed in version 1.2.5 as noted in `references/changelog.md`, indicating responsible development. While user input in multi-step flows (e.g., `handler.js`'s `onMessage` function) is directly processed, it is properly encoded before API calls, and there are no instructions in `SKILL.md` or the code to exploit the AI agent itself for malicious purposes. No evidence of data exfiltration, persistence, or unauthorized execution was found.
Capability Assessment
Purpose & Capability
Name/description match the code and docs: the skill implements Gumroad product/sales/licenses/discounts/payouts/webhooks operations and only requires a Gumroad API token (GUMROAD_ACCESS_TOKEN with API_KEY as fallback). Requested binaries (node) match the included Node.js handler and CLI.
Instruction Scope
SKILL.md instructs using the included handler.js GUI first and the CLI script as fallback, references only platform config (~/.openclaw/openclaw.json) and ctx.session for transient state, and requires the Gumroad token. There are no instructions to read unrelated files, exfiltrate system data, or call unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only at registry level) but the package includes handler.js and a CLI script. That is low-risk — no external downloads or install scripts — but the presence of executable code means the skill will run Node.js code supplied in the bundle.
Credentials
Only GUMROAD_ACCESS_TOKEN (primary) and an alternate API_KEY are declared and used. These map directly to the Gumroad API usage in both handler.js and the CLI. No unrelated secrets or excessive environment access are requested.
Persistence & Privilege
The skill does not request always:true, does not persist data to disk (uses ctx.session for transient state), and does not modify other skills or system-wide config. Autonomous invocation is allowed (default) which is expected for skills of this type.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install gumroad-pro
  3. After installation, invoke the skill by name or use /gumroad-pro
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.9
- Internal update to handler.js for improved merchant management workflows. - No changes to documentation or user-facing protocols. - Version remains focused on comprehensive Gumroad management features.
v1.2.3
- Added "API_KEY" as an alternative required environment variable for authentication. - Updated documentation to reflect both supported authentication variables: GUMROAD_ACCESS_TOKEN and API_KEY. - No breaking changes to existing workflows or feature usage.
v1.2.2
- Major documentation overhaul: SKILL.md rewritten for clarity, concise workflows, and improved AI protocols. - New dedicated technical reference files added: api-reference.md, handler-guide.md, ui-rendering.md, changelog.md. - Improved separation of handler-driven UI and CLI fallback usage. - Updated authentication instructions and metadata for OpenClaw compatibility. - Removed legacy and redundant files (e.g., pending_input.json, previous CHANGELOG.md).
v1.2.1
- Updated CHANGELOG.md for version 1.2.1. - Bumped version metadata in _meta.json. - Internal maintenance and version sync; no changes to user-facing commands or features.
v1.2.0
**Version 1.2.0 – Adds flexible authentication and refines UI protocol** - Added support for using `apiKey` (mapped to `API_KEY`) in skill configuration for authentication, in addition to existing environment variable. - Updated SKILL.md with revised setup instructions reflecting the new `apiKey` usage option. - Tightened UI requirements: On Telegram and Discord, menus must render using the `message` tool with `buttons`; raw CLI output is no longer allowed on these platforms. - Introduced `pending_input.json` state pattern in handler guidance for multi-step user input. - Updated changelog and documentation to reflect new authentication flexibility and stricter UI protocol.
v0.1.0
Initial release of gumroad-pro: All-in-one advanced Gumroad merchant management skill. - Supports interactive dashboard and direct CLI commands for Gumroad accounts. - Allows management of products, sales, payouts, discount codes, licenses, subscribers, variants, and store webhooks. - Provides detailed command syntax for each feature, tailored for multi-platform UI (buttons or lists). - Implements safety checks before deletes and refunds, and clear handling for pricing and ID integrity. - Requires a Gumroad access token for setup; setup instructions included.
v4.0.1
gumroad-pro 4.0.1 - Added CHANGELOG.md and pending_input.json files for better documentation and multi-step input handling. - Removed README.md for streamlined documentation structure. - Updated SKILL.md: CLI and UI interaction protocols clarified, including Boolean flag usage, state management, and adaptive rendering across platforms. - Enhanced safety guidance: confirmation required before delete/refund, error transparency protocols improved. - CLI reference and option flags updated for consistency and accuracy.
v4.0.0
Major update: Gumroad Pro v4.0.0 delivers powerful merchant management features and a fully interactive dashboard experience. - Full-feature advanced UI with adaptive controls for Telegram, Discord, WhatsApp, and Signal. - Comprehensive CLI commands for product management, licenses, sales, payouts, custom checkout fields, and automation/webhooks. - Enhanced subscription and license key management, including verification, rotation, and usage tracking. - Robust error handling, confirmation prompts for critical actions, and environment-based security for account access. - Detailed operational guidance for integrations, state management, and user interface interaction. - Supports both real-time sales analytics and granular customization of product variants and checkout flows.
Metadata
Slug gumroad-pro
Version 1.2.9
License
All-time Installs 0
Active Installs 0
Total Versions 8
Frequently Asked Questions

What is Gumroad Pro?

Comprehensive Gumroad merchant management including product catalogs, sales intelligence, recurring subscription oversight, license key management, and finan... It is an AI Agent Skill for Claude Code / OpenClaw, with 1547 downloads so far.

How do I install Gumroad Pro?

Run "/install gumroad-pro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Gumroad Pro free?

Yes, Gumroad Pro is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Gumroad Pro support?

Gumroad Pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Gumroad Pro?

It is built and maintained by abdul-karim-mia (@abdul-karim-mia); the current version is v1.2.9.

💬 Comments