← Back to Skills Marketplace
wp-ai-dev

wooshpay-api

by wooshpay · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
325
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install wooshpay
Description
WooshPay Payment Gateway Integration. For creating payments, checking order status, processing refunds, and managing checkout sessions. Use scenarios: - Crea...
Usage Guidance
This package implements a WooshPay CLI client and appears to call only api.wooshpay.com, which matches its description — but review the following before installing: 1) Do not paste your WOOSHPAY_API_KEY into chat. Set it as an environment variable locally (export WOOSHPAY_API_KEY=...) instead. 2) The registry metadata omitted the required env var (WOOSHPAY_API_KEY) and SKILL.md references cancel_payment.py which is missing — ask the publisher for a corrected package or full source. 3) Verify the API domain (api.wooshpay.com) and inspect the scripts yourself; run them in a safe/test environment first. 4) If you do not want the agent to call payment APIs autonomously, keep autonomous invocation disabled for this skill or restrict when it can be used.
Capability Analysis
Type: OpenClaw Skill Name: wooshpay Version: 1.0.2 The skill bundle provides a legitimate integration for the WooshPay payment gateway. The scripts (create_payment.py, create_checkout.py, get_payment.py, and refund.py) implement standard API interactions with the official WooshPay endpoint (api.wooshpay.com) using a user-provided API key. There is no evidence of data exfiltration, malicious code execution, or prompt injection attempts.
Capability Assessment
Purpose & Capability
Name, description, and included scripts align with a WooshPay payment integration (create payment, checkout sessions, refunds, query). However the registry metadata claims no required env vars while SKILL.md and all scripts require WOOSHPAY_API_KEY (mismatch). SKILL.md also references cancel_payment.py which is not included (missing file).
Instruction Scope
SKILL.md and the scripts are limited to interacting with https://api.wooshpay.com and local interactive prompts. But create_payment.py prints a suggestion to 'tell me your API Key in conversation, I'll help you set it', which explicitly encourages exposing secrets to the agent—this is out of scope for a CLI utility and could lead to secret sharing with the model. Otherwise the scripts only read the WOOSHPAY_API_KEY env var and make HTTP calls to the stated API endpoints.
Install Mechanism
Instruction-only skill with bundled Python scripts; no install spec, no external downloads, and no archive extraction. No install-time risk detected.
Credentials
Only one secret is needed (WOOSHPAY_API_KEY), which is appropriate for a payment gateway client — but the registry metadata does not declare it (inconsistency). Additionally, the code/text that suggests pasting the API key into conversation increases risk of accidental exfiltration. The scripts require a Base64-encoded API key (documented).
Persistence & Privilege
always is false and the skill does not request or modify other skills or agent-wide configuration. It does not persist credentials itself. Autonomous invocation is allowed by default (not flagged alone) — consider whether you want the agent to call these endpoints automatically.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install wooshpay
  3. After installation, invoke the skill by name or use /wooshpay
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Expanded documentation and provided official references. - Added links to official WooshPay API documentation for setup, payment methods, and currencies. - Expanded list of supported payment methods and currencies, with reference links. - Clarified quick start steps for obtaining and setting API keys. - No code or file changes—documentation only.
v1.0.1
- Added support for creating hosted checkout sessions via scripts/create_checkout.py. - Added refund capability through scripts/refund.py, allowing users to process refunds for eligible payments. - Updated documentation to reflect new operations: checkout session creation and refunds, including usage notes and supported reasons for refunds. - Expanded payment methods and currency support details in the documentation.
v1.0.0
v1.0 :Provide the basic capabilities of woospay integration
Metadata
Slug wooshpay
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is wooshpay-api?

WooshPay Payment Gateway Integration. For creating payments, checking order status, processing refunds, and managing checkout sessions. Use scenarios: - Crea... It is an AI Agent Skill for Claude Code / OpenClaw, with 325 downloads so far.

How do I install wooshpay-api?

Run "/install wooshpay" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is wooshpay-api free?

Yes, wooshpay-api is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does wooshpay-api support?

wooshpay-api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created wooshpay-api?

It is built and maintained by wooshpay (@wp-ai-dev); the current version is v1.0.2.

💬 Comments