← 返回 Skills 市场
Stripe API Actions
作者
Stanislav Stankovic
· GitHub ↗
· v1.0.0
· MIT-0
58
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stripe-api-actions
功能描述
Use Stripe's live REST API for authenticated write actions. Use when you need to create or update Stripe customers, products, prices, payment links, refunds,...
安全使用建议
This skill appears to do exactly what it says (perform Stripe write operations) and the code only talks to api.stripe.com, but the registry metadata fails to declare the required secret. Before installing: (1) verify the skill author/source — there's no homepage and owner is unknown; (2) do not supply a live unrestricted Stripe secret until you audit the code yourself; (3) prefer using a restricted key or a test key scoped to only the needed write actions while evaluating; (4) confirm the platform/registry metadata is updated to declare STRIPE_SECRET_KEY as the primary credential; (5) review the script (it's included) to ensure it meets your safety policies and that --confirm behavior fits your automation needs; (6) monitor Stripe audit logs and be prepared to rotate keys if anything unexpected occurs.
功能分析
Type: OpenClaw Skill
Name: stripe-api-actions
Version: 1.0.0
The skill provides a legitimate and transparent interface for interacting with the Stripe API to perform write operations like creating customers and processing refunds. It follows security best practices by requiring a mandatory --confirm flag for all write actions, using environment variables for secret management (STRIPE_SECRET_KEY), and relying solely on Python standard libraries (urllib) without external dependencies or obfuscation. The logic in scripts/stripe_actions.py is strictly limited to the official Stripe API endpoint (api.stripe.com).
能力标签
能力评估
Purpose & Capability
Name, description, SKILL.md and the included script all align: the skill performs authenticated Stripe write actions (customers, products, prices, refunds, subscriptions, metadata). The code implements only Stripe API calls and matches the stated purpose. However, the registry metadata lists no required environment variables or primary credential despite SKILL.md and the script clearly requiring STRIPE_SECRET_KEY — this metadata omission is noteworthy.
Instruction Scope
SKILL.md instructs the operator to set STRIPE_SECRET_KEY and to require --confirm for writes. The included script enforces --confirm and only talks to api.stripe.com. There is no instruction or code that reads unrelated files, contacts other external endpoints, or exfiltrates data. The concern is that the runtime instructions access an environment secret (STRIPE_SECRET_KEY) that the registry did not declare; the instructions therefore reference resources outside the declared surface.
Install Mechanism
No install spec; skill is instruction-only with a bundled Python helper script. Nothing is downloaded at install time and no archives are extracted. This is low-risk from installation mechanism perspective.
Credentials
The script and SKILL.md require STRIPE_SECRET_KEY in the environment, and that key is the primary credential needed for write access. But the registry metadata lists no required env vars and no primary credential. This mismatch is disproportionate and could lead to accidental exposure if users aren't warned; the skill should declare STRIPE_SECRET_KEY (and ideally recommend using restricted/test keys).
Persistence & Privilege
The skill does not request always:true, does not modify other skills' configs, and has no install-time persistence. Autonomous invocation is allowed (platform default) but is not combined with other privilege escalation indicators here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install stripe-api-actions - 安装完成后,直接呼叫该 Skill 的名称或使用
/stripe-api-actions触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: authenticated Stripe write-action skill for customers, products, prices, payment links, refunds, subscription cancellation, and metadata updates.
元数据
常见问题
Stripe API Actions 是什么?
Use Stripe's live REST API for authenticated write actions. Use when you need to create or update Stripe customers, products, prices, payment links, refunds,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 58 次。
如何安装 Stripe API Actions?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stripe-api-actions」即可一键安装,无需额外配置。
Stripe API Actions 是免费的吗?
是的,Stripe API Actions 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Stripe API Actions 支持哪些平台?
Stripe API Actions 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Stripe API Actions?
由 Stanislav Stankovic(@stanestane)开发并维护,当前版本 v1.0.0。
推荐 Skills