← 返回 Skills 市场
6059
总下载
3
收藏
1
当前安装
9
版本数
在 OpenClaw 中安装
/install squareup
功能描述
Square API integration with managed OAuth. Install only if you need Square administration. Connect with the least-privileged Square account and OAuth scopes...
安全使用建议
Install only if you intend to let an agent administer Square through Maton. Use the least-privileged Square account and OAuth scopes, keep MATON_API_KEY secret, avoid printing the full key in shared outputs, verify the connection ID before requests, and approve each payment, refund, invoice, customer, catalog, inventory, card, terminal, or delete action only after checking the account, resource ID, amount, and consequence.
功能分析
Type: OpenClaw Skill
Name: squareup
Version: 1.0.8
The 'squareup' skill provides a legitimate integration with the Square API via the Maton API gateway (api.maton.ai). It includes comprehensive documentation for managing OAuth connections and interacting with various Square endpoints (Payments, Customers, Orders, etc.). The SKILL.md file contains explicit safety instructions for the AI agent, such as requiring user confirmation for write operations and protecting the MATON_API_KEY environment variable. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.
能力评估
Purpose & Capability
The stated purpose is Square administration through Maton-managed OAuth, and the documented capabilities include high-impact actions such as payments, refunds, invoices, customer updates, catalog changes, cards, bank accounts, and terminal checkouts.
Instruction Scope
The instructions disclose the API gateway, require documented endpoint paths, recommend read-only verification first, and require explicit user approval with exact identifiers and consequences before POST, PUT, or DELETE operations.
Install Mechanism
The artifact is an instruction-only Markdown skill with no executable scripts, dependencies, or automatic install-time behavior; it declares the required MATON_API_KEY environment variable.
Credentials
Network access to api.maton.ai and use of MATON_API_KEY are proportionate to the OAuth gateway design, but Square data and actions are routed through a third-party service.
Persistence & Privilege
The skill supports persistent Square OAuth connection creation and deletion, which is expected for managed OAuth and is paired with least-privilege and revocation guidance.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install squareup - 安装完成后，直接呼叫该 Skill 的名称或使用
/squareup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.8
squareup 1.0.8
- Refined security and approval language to clarify that this integration mutates Square data, and emphasize explicit approval for each write action.
- Shortened and clarified the description and introductory notes for easier reading.
- Trimmed detailed feature lists in the introduction; now directs users to the API Reference for supported endpoints.
- Strengthened language on least-privilege, account selection, and resource verification before write operations.
- No functional changes to API endpoints or usage.
v1.0.7
- Clarified the base URL usage to ensure only documented API endpoints are supported—arbitrary endpoint paths are no longer accepted.
- Added a prominent security note under Authentication emphasizing the importance of treating the API key as a secret and including rotation instructions.
- Updated the proxy description to clarify request flow and endpoint restrictions.
- No functional or code changes; documentation only.
v1.0.6
- Clarified and strengthened the description with more direct security and usage guidance.
- Emphasized that all write operations require explicit user approval, showing the exact endpoint, resource, and consequences.
- Recommended using the least-privileged Square account/scopes and verifying connection IDs before each request.
- Streamlined language for admin-focused installation and advised promptly revoking unused connections.
- No changes to API endpoints or functionality.
v1.0.5
- Clarified that this skill has write capability for Square business data, including financial and operational actions.
- Updated description and security section to emphasize explicit user approval is required for all create, update, and delete operations, with verification of specific resources and effects.
- Enhanced guidance to default to read-only actions, requiring confirmation and summary of consequences before performing sensitive operations.
- Warned about the breadth of account access, urging least-privilege and prompt OAuth revocation when not needed.
- No changes to API endpoints or core functionality.
v1.0.4
- Switched all documentation and API endpoints from gateway.maton.ai/ctrl.maton.ai to api.maton.ai.
- Updated instructions for connection management and quick start to use the new api.maton.ai URLs.
- Clarified usage of the Maton-Connection header and recommended always including it when multiple Square connections exist.
- Added a new Security & Permissions section with guidance on user approval for write operations.
- Removed the LICENSE.txt file.
v1.0.3
- Expanded description to include support for loyalty programs, team members, and payment links.
- Updated usage guidance to reflect new Square API capabilities.
- No code changes; documentation only.
v1.0.2
- Added metadata field for "clawdbot" specifying an emoji and required environment variable.
- Now explicitly documents that MATON_API_KEY must be set as an environment variable.
- No changes to functionality or API; documentation and metadata update only.
v1.0.1
- No user-facing changes in this version.
- Internal SKILL.md file was updated only; there are no functional or documentation changes visible to users.
v1.0.0
Initial release of Square API integration skill.
- Provides access to Square API for payments, customers, orders, catalog, inventory, and invoices.
- Supports managed OAuth authentication and connection management via Maton.
- Includes sample code for Python to list locations and manage OAuth connections.
- Covers usage of the Maton API key and specifying active Square connections.
- Detailed API reference for common Square endpoints and operations.
- Designed for point-of-sale, payment processing, inventory, and invoicing workflows through Square.
元数据
常见问题
Square 是什么？
Square API integration with managed OAuth. Install only if you need Square administration. Connect with the least-privileged Square account and OAuth scopes... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 6059 次。
如何安装 Square？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install squareup」即可一键安装，无需额外配置。
Square 是免费的吗？
是的，Square 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Square 支持哪些平台？
Square 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Square？
由 byungkyu（@byungkyu）开发并维护，当前版本 v1.0.8。
推荐 Skills