← Back to Skills Marketplace
Stripe Setup
by
ferrentinomj-dev
· GitHub ↗
· v1.0.0
· MIT-0
88
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install stripe-setup
Description
Add Stripe payments to any agent-built app. Covers checkout sessions, subscription billing, webhook handling, customer portal, and test-mode validation. Use...
Usage Guidance
This skill appears to be a straightforward Stripe integration helper, but the registry metadata fails to list the sensitive environment variables the SKILL.md and code require. Before installing or enabling: (1) confirm you will provide STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, STRIPE_PUBLISHABLE_KEY, and STRIPE_PRICE_ID in a secure server-side environment (never expose secret keys to frontend); (2) use test (sk_test_) keys first and verify webhook signature checking is enabled; (3) replace the in-memory idempotency example with a persistent store (DB/Redis) to avoid duplicate fulfilment; (4) review the included scripts for any unexpected network calls (none found) and ensure .env is not committed to version control; (5) consider the unknown source/homepage — if you require provenance, request the author's repo or a verified publisher before using in production.
Capability Analysis
Type: OpenClaw Skill
Name: stripe-setup
Version: 1.0.0
The stripe-setup skill bundle provides legitimate utility and boilerplate code for integrating Stripe payments into Python applications. The code in scripts/stripe_helpers.py and the instructions in SKILL.md follow standard Stripe API practices, including webhook signature verification and secure environment variable handling, with no evidence of malicious intent or data exfiltration.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's name, description, SKILL.md, and included helper module all focus on Stripe payments and require Stripe API keys and webhook secrets — that is coherent with the stated purpose. However the registry metadata claims 'Required env vars: none' and 'Primary credential: none', which contradicts the SKILL.md and code that clearly require STRIPE_SECRET_KEY, STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET, and STRIPE_PRICE_ID. The omission in metadata is misleading.
Instruction Scope
The runtime instructions and the helper module stay within the Stripe integration domain: creating checkout/portal sessions, verifying webhooks, customer helpers, and a CLI connectivity check. They do not instruct reading unrelated system files or sending data to external endpoints other than Stripe's API. Webhook signature verification and idempotency are discussed (though the SKILL.md's idempotency example is an in-memory set and the docs note to use a DB/Redis in production).
Install Mechanism
This is an instruction-only skill with one helper Python file and no install spec. It recommends installing public PyPI packages (stripe, python-dotenv). Nothing is downloaded from unknown URLs and nothing is written to disk by an installer; risk from installation is low, but users must run pip themselves.
Credentials
The environment variables used by the code (STRIPE_SECRET_KEY, STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET, STRIPE_PRICE_ID) are appropriate and required for Stripe integration. The problem is metadata omission: the skill registry entry does not declare these required env vars or a primary credential, which underreports the sensitive secrets the skill needs. This mismatch could cause users to install or invoke the skill without realizing it needs server-side secret keys.
Persistence & Privilege
The skill does not request persistent platform privileges (always:false), does not modify other skills or system-wide settings, and does not request unusual config paths. It is a normal user-invocable helper library for server-side logic.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stripe-setup - After installation, invoke the skill by name or use
/stripe-setup - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of stripe-setup: Easily add Stripe payments to any Python Flask-based app.
- Offers full payment flows: one-time and subscription checkouts, webhook handling, and customer portal integration.
- Provides step-by-step setup instructions, including API key and environment variable management.
- Includes ready-to-use code snippets for checkout sessions, webhook endpoints, and billing portal in Flask.
- Guides testing and local development using the Stripe CLI.
- No prior Stripe experience required; clear setup steps and sample code provided.
Metadata
Frequently Asked Questions
What is Stripe Setup?
Add Stripe payments to any agent-built app. Covers checkout sessions, subscription billing, webhook handling, customer portal, and test-mode validation. Use... It is an AI Agent Skill for Claude Code / OpenClaw, with 88 downloads so far.
How do I install Stripe Setup?
Run "/install stripe-setup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Stripe Setup free?
Yes, Stripe Setup is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Stripe Setup support?
Stripe Setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Stripe Setup?
It is built and maintained by ferrentinomj-dev (@ferrentinomj-dev); the current version is v1.0.0.
More Skills