← 返回 Skills 市场
abdul-karim-mia

Gumroad Pro

作者 abdul-karim-mia · GitHub ↗ · v1.2.9
cross-platform ✓ 安全检测通过
1547
总下载
1
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install gumroad-pro
功能描述
Comprehensive Gumroad merchant management including product catalogs, sales intelligence, recurring subscription oversight, license key management, and finan...
使用说明 (SKILL.md)

Gumroad Pro

🛑 AI PROTOCOL

  1. PRIORITIZE HANDLER: Always attempt to use the interactive button-based GUI (handled by handler.js) for the best merchant experience.
  2. CLI AS FALLBACK: Only use scripts/gumroad-pro.js via the CLI for complex data retrieval or specific actions not available in the GUI.
  3. USE --json: When using the CLI, ALWAYS use the --json flag and check for "success": true.
  4. REDUCE SPAM: Use action: 'edit' in renderResponse for all menu transitions and state updates. Only use action: 'send' for the initial menu or when the context fundamentally changes.
  5. HANDLE ERRORS: Read the "error" field in JSON responses to inform the user of failures.

❓ Navigation & Data

  • Primary Interaction: Use the adaptive logic in handler.js. See handler-guide.md for interaction patterns, ui-rendering.md for rendering protocols, and changelog.md for version history. Respond with button callback data (e.g., gp:products) or digits (1, 2, 3) where applicable.
  • Secondary Interaction: Use scripts/gumroad-pro.js for direct actions. See api-reference.md for command specs.

🔑 Authentication

The skill requires a Gumroad API Key. It looks for the following environment variables (in order of preference):

  1. GUMROAD_ACCESS_TOKEN
  2. API_KEY

Configuration

You can set this in your ~/.openclaw/openclaw.json using the apiKey convenience field:

{
  "skills": {
    "entries": {
      "gumroad-pro": {
        "enabled": true,
        "apiKey": "YOUR_GUMROAD_TOKEN"
      }
    }
  }
}

The platform will automatically inject your apiKey into the preferred GUMROAD_ACCESS_TOKEN variable.

🛠️ Workflows

Product Inventory

  • List all digital assets to monitor sales and availability.
  • Toggle publication status or delete obsolete items.
  • View detailed product commands.

Sales & Fulfillment

Licensing

Offer Management


Developed for the OpenClaw community by Abdul Karim Mia.

安全使用建议
This skill appears to do what it claims: it needs your Gumroad API token and will call api.gumroad.com to manage products, sales, licenses, discounts, payouts, and webhooks. Before installing: 1) Provide a Gumroad token with the minimum required scope and avoid reusing sensitive tokens for other services; 2) Be aware that creating webhooks via the tool will register external URLs that will receive event payloads (don’t point webhooks at endpoints you don’t control); 3) Note there is executable JavaScript bundled (handler.js and a CLI) — inspect the code or review the linked GitHub repo to satisfy yourself about the author and updates; 4) If you need stricter controls, rotate the token after testing or create a token dedicated to this skill.
功能分析
Type: OpenClaw Skill Name: gumroad-pro Version: 1.2.9 The skill provides comprehensive Gumroad merchant management, interacting with the legitimate `api.gumroad.com` via `https`. Both `handler.js` and `scripts/gumroad-pro.js` use `URLSearchParams` and `encodeURIComponent` for all parameters, mitigating API injection risks. A previous security vulnerability (use of `spawnSync`) was explicitly removed in version 1.2.5 as noted in `references/changelog.md`, indicating responsible development. While user input in multi-step flows (e.g., `handler.js`'s `onMessage` function) is directly processed, it is properly encoded before API calls, and there are no instructions in `SKILL.md` or the code to exploit the AI agent itself for malicious purposes. No evidence of data exfiltration, persistence, or unauthorized execution was found.
能力评估
Purpose & Capability
Name/description match the code and docs: the skill implements Gumroad product/sales/licenses/discounts/payouts/webhooks operations and only requires a Gumroad API token (GUMROAD_ACCESS_TOKEN with API_KEY as fallback). Requested binaries (node) match the included Node.js handler and CLI.
Instruction Scope
SKILL.md instructs using the included handler.js GUI first and the CLI script as fallback, references only platform config (~/.openclaw/openclaw.json) and ctx.session for transient state, and requires the Gumroad token. There are no instructions to read unrelated files, exfiltrate system data, or call unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only at registry level) but the package includes handler.js and a CLI script. That is low-risk — no external downloads or install scripts — but the presence of executable code means the skill will run Node.js code supplied in the bundle.
Credentials
Only GUMROAD_ACCESS_TOKEN (primary) and an alternate API_KEY are declared and used. These map directly to the Gumroad API usage in both handler.js and the CLI. No unrelated secrets or excessive environment access are requested.
Persistence & Privilege
The skill does not request always:true, does not persist data to disk (uses ctx.session for transient state), and does not modify other skills or system-wide config. Autonomous invocation is allowed (default) which is expected for skills of this type.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install gumroad-pro
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /gumroad-pro 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.9
- Internal update to handler.js for improved merchant management workflows. - No changes to documentation or user-facing protocols. - Version remains focused on comprehensive Gumroad management features.
v1.2.3
- Added "API_KEY" as an alternative required environment variable for authentication. - Updated documentation to reflect both supported authentication variables: GUMROAD_ACCESS_TOKEN and API_KEY. - No breaking changes to existing workflows or feature usage.
v1.2.2
- Major documentation overhaul: SKILL.md rewritten for clarity, concise workflows, and improved AI protocols. - New dedicated technical reference files added: api-reference.md, handler-guide.md, ui-rendering.md, changelog.md. - Improved separation of handler-driven UI and CLI fallback usage. - Updated authentication instructions and metadata for OpenClaw compatibility. - Removed legacy and redundant files (e.g., pending_input.json, previous CHANGELOG.md).
v1.2.1
- Updated CHANGELOG.md for version 1.2.1. - Bumped version metadata in _meta.json. - Internal maintenance and version sync; no changes to user-facing commands or features.
v1.2.0
**Version 1.2.0 – Adds flexible authentication and refines UI protocol** - Added support for using `apiKey` (mapped to `API_KEY`) in skill configuration for authentication, in addition to existing environment variable. - Updated SKILL.md with revised setup instructions reflecting the new `apiKey` usage option. - Tightened UI requirements: On Telegram and Discord, menus must render using the `message` tool with `buttons`; raw CLI output is no longer allowed on these platforms. - Introduced `pending_input.json` state pattern in handler guidance for multi-step user input. - Updated changelog and documentation to reflect new authentication flexibility and stricter UI protocol.
v0.1.0
Initial release of gumroad-pro: All-in-one advanced Gumroad merchant management skill. - Supports interactive dashboard and direct CLI commands for Gumroad accounts. - Allows management of products, sales, payouts, discount codes, licenses, subscribers, variants, and store webhooks. - Provides detailed command syntax for each feature, tailored for multi-platform UI (buttons or lists). - Implements safety checks before deletes and refunds, and clear handling for pricing and ID integrity. - Requires a Gumroad access token for setup; setup instructions included.
v4.0.1
gumroad-pro 4.0.1 - Added CHANGELOG.md and pending_input.json files for better documentation and multi-step input handling. - Removed README.md for streamlined documentation structure. - Updated SKILL.md: CLI and UI interaction protocols clarified, including Boolean flag usage, state management, and adaptive rendering across platforms. - Enhanced safety guidance: confirmation required before delete/refund, error transparency protocols improved. - CLI reference and option flags updated for consistency and accuracy.
v4.0.0
Major update: Gumroad Pro v4.0.0 delivers powerful merchant management features and a fully interactive dashboard experience. - Full-feature advanced UI with adaptive controls for Telegram, Discord, WhatsApp, and Signal. - Comprehensive CLI commands for product management, licenses, sales, payouts, custom checkout fields, and automation/webhooks. - Enhanced subscription and license key management, including verification, rotation, and usage tracking. - Robust error handling, confirmation prompts for critical actions, and environment-based security for account access. - Detailed operational guidance for integrations, state management, and user interface interaction. - Supports both real-time sales analytics and granular customization of product variants and checkout flows.
元数据
Slug gumroad-pro
版本 1.2.9
许可证
累计安装 0
当前安装数 0
历史版本数 8
常见问题

Gumroad Pro 是什么?

Comprehensive Gumroad merchant management including product catalogs, sales intelligence, recurring subscription oversight, license key management, and finan... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1547 次。

如何安装 Gumroad Pro?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install gumroad-pro」即可一键安装,无需额外配置。

Gumroad Pro 是免费的吗?

是的,Gumroad Pro 完全免费(开源免费),可自由下载、安装和使用。

Gumroad Pro 支持哪些平台?

Gumroad Pro 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Gumroad Pro?

由 abdul-karim-mia(@abdul-karim-mia)开发并维护,当前版本 v1.2.9。

💬 留言讨论