← 返回 Skills 市场

payment-processor

Name: payment-processor
Author: jpengcheng523-netizen

作者 jpengcheng523-netizen · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

261

总下载

当前安装

版本数

在 OpenClaw 中安装

/install jpeng-payment-processor

功能描述

Process payments

使用说明 (SKILL.md)

Payment Processor

Process payments

When to Use

User needs payment related functionality
Automating process tasks
Ecommerce operations

Usage

python3 scripts/payment_processor.py --input \x3Cinput> --output \x3Coutput>

Configuration

Set required environment variables:

export PROCESS_API_KEY="your-api-key"

Output

Returns JSON with results:

{
  "success": true,
  "data": {}
}

安全使用建议

Do not install or enable this skill until the inconsistencies are resolved. Specifically: (1) ask the publisher for the missing code (scripts/payment_processor.py) or an install process—right now the skill has no executable logic; (2) require the manifest to explicitly declare PROCESS_API_KEY (and what service it is for), and verify the minimum privileges for that key; (3) request source/homepage and an auditable repository or release so you can inspect the payment integration (endpoints, TLS usage, where credentials are sent); (4) avoid pasting real payment API keys into a skill with unknown provenance—use test/sandbox keys until code is reviewed. These steps reduce risk and make the skill's behavior auditable.

功能分析

Type: OpenClaw Skill Name: jpeng-payment-processor Version: 1.0.0 The provided files (_meta.json and SKILL.md) contain standard metadata and documentation for a payment processing skill. The documentation describes legitimate functionality, requires a standard API key environment variable, and lacks any indicators of prompt injection, malicious instructions, or data exfiltration. While the core logic script (scripts/payment_processor.py) is referenced but not included in the provided text, the documentation itself is benign.

能力评估

⚠ Purpose & Capability

The declared purpose (process payments) matches the idea of needing an API key, but the skill bundle contains no payment integration code or install steps. The SKILL.md expects a local script (scripts/payment_processor.py) that does not exist in the package, which is inconsistent with the claimed capability.

⚠ Instruction Scope

Runtime instructions tell the agent to run 'python3 scripts/payment_processor.py' and to read an environment variable PROCESS_API_KEY. Since there is no scripts/ directory or code file provided, the instructions are incomplete and could cause the agent or user to attempt to execute missing or externally fetched code. The SKILL.md references an env var that is not declared in the skill manifest.

✓ Install Mechanism

No install mechanism is provided (instruction-only), which is low risk in itself. However, the lack of an install step combined with instructions that expect local code increases incoherence.

⚠ Credentials

The SKILL.md requires PROCESS_API_KEY, which is plausible for a payment integration, but the skill metadata declares no required env vars or primary credential. Requiring a payment API key without declaring it is a mismatch and should be clarified. Payment API keys are sensitive—their use should be explicit and minimal.

✓ Persistence & Privilege

The skill does not request persistent inclusion (always:false) and does not modify other skills or system settings. No elevated persistence privileges are requested.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install jpeng-payment-processor
安装完成后，直接呼叫该 Skill 的名称或使用 /jpeng-payment-processor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

jpeng-payment-processor 1.0.0 - Initial release. - Provides payment processing functionality for ecommerce operations. - Usage instructions and configuration details included. - Returns JSON output with processing results.

元数据

Slug jpeng-payment-processor

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题