← 返回 Skills 市场
Stripe Setup
作者
ferrentinomj-dev
· GitHub ↗
· v1.0.0
· MIT-0
88
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stripe-setup
功能描述
Add Stripe payments to any agent-built app. Covers checkout sessions, subscription billing, webhook handling, customer portal, and test-mode validation. Use...
安全使用建议
This skill appears to be a straightforward Stripe integration helper, but the registry metadata fails to list the sensitive environment variables the SKILL.md and code require. Before installing or enabling: (1) confirm you will provide STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, STRIPE_PUBLISHABLE_KEY, and STRIPE_PRICE_ID in a secure server-side environment (never expose secret keys to frontend); (2) use test (sk_test_) keys first and verify webhook signature checking is enabled; (3) replace the in-memory idempotency example with a persistent store (DB/Redis) to avoid duplicate fulfilment; (4) review the included scripts for any unexpected network calls (none found) and ensure .env is not committed to version control; (5) consider the unknown source/homepage — if you require provenance, request the author's repo or a verified publisher before using in production.
功能分析
Type: OpenClaw Skill
Name: stripe-setup
Version: 1.0.0
The stripe-setup skill bundle provides legitimate utility and boilerplate code for integrating Stripe payments into Python applications. The code in scripts/stripe_helpers.py and the instructions in SKILL.md follow standard Stripe API practices, including webhook signature verification and secure environment variable handling, with no evidence of malicious intent or data exfiltration.
能力标签
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, and included helper module all focus on Stripe payments and require Stripe API keys and webhook secrets — that is coherent with the stated purpose. However the registry metadata claims 'Required env vars: none' and 'Primary credential: none', which contradicts the SKILL.md and code that clearly require STRIPE_SECRET_KEY, STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET, and STRIPE_PRICE_ID. The omission in metadata is misleading.
Instruction Scope
The runtime instructions and the helper module stay within the Stripe integration domain: creating checkout/portal sessions, verifying webhooks, customer helpers, and a CLI connectivity check. They do not instruct reading unrelated system files or sending data to external endpoints other than Stripe's API. Webhook signature verification and idempotency are discussed (though the SKILL.md's idempotency example is an in-memory set and the docs note to use a DB/Redis in production).
Install Mechanism
This is an instruction-only skill with one helper Python file and no install spec. It recommends installing public PyPI packages (stripe, python-dotenv). Nothing is downloaded from unknown URLs and nothing is written to disk by an installer; risk from installation is low, but users must run pip themselves.
Credentials
The environment variables used by the code (STRIPE_SECRET_KEY, STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET, STRIPE_PRICE_ID) are appropriate and required for Stripe integration. The problem is metadata omission: the skill registry entry does not declare these required env vars or a primary credential, which underreports the sensitive secrets the skill needs. This mismatch could cause users to install or invoke the skill without realizing it needs server-side secret keys.
Persistence & Privilege
The skill does not request persistent platform privileges (always:false), does not modify other skills or system-wide settings, and does not request unusual config paths. It is a normal user-invocable helper library for server-side logic.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install stripe-setup - 安装完成后,直接呼叫该 Skill 的名称或使用
/stripe-setup触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of stripe-setup: Easily add Stripe payments to any Python Flask-based app.
- Offers full payment flows: one-time and subscription checkouts, webhook handling, and customer portal integration.
- Provides step-by-step setup instructions, including API key and environment variable management.
- Includes ready-to-use code snippets for checkout sessions, webhook endpoints, and billing portal in Flask.
- Guides testing and local development using the Stripe CLI.
- No prior Stripe experience required; clear setup steps and sample code provided.
元数据
常见问题
Stripe Setup 是什么?
Add Stripe payments to any agent-built app. Covers checkout sessions, subscription billing, webhook handling, customer portal, and test-mode validation. Use... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 88 次。
如何安装 Stripe Setup?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stripe-setup」即可一键安装,无需额外配置。
Stripe Setup 是免费的吗?
是的,Stripe Setup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Stripe Setup 支持哪些平台?
Stripe Setup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Stripe Setup?
由 ferrentinomj-dev(@ferrentinomj-dev)开发并维护,当前版本 v1.0.0。
推荐 Skills