← 返回 Skills 市场
325
总下载
1
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install wooshpay
功能描述
WooshPay Payment Gateway Integration. For creating payments, checking order status, processing refunds, and managing checkout sessions. Use scenarios: - Crea...
安全使用建议
This package implements a WooshPay CLI client and appears to call only api.wooshpay.com, which matches its description — but review the following before installing: 1) Do not paste your WOOSHPAY_API_KEY into chat. Set it as an environment variable locally (export WOOSHPAY_API_KEY=...) instead. 2) The registry metadata omitted the required env var (WOOSHPAY_API_KEY) and SKILL.md references cancel_payment.py which is missing — ask the publisher for a corrected package or full source. 3) Verify the API domain (api.wooshpay.com) and inspect the scripts yourself; run them in a safe/test environment first. 4) If you do not want the agent to call payment APIs autonomously, keep autonomous invocation disabled for this skill or restrict when it can be used.
功能分析
Type: OpenClaw Skill
Name: wooshpay
Version: 1.0.2
The skill bundle provides a legitimate integration for the WooshPay payment gateway. The scripts (create_payment.py, create_checkout.py, get_payment.py, and refund.py) implement standard API interactions with the official WooshPay endpoint (api.wooshpay.com) using a user-provided API key. There is no evidence of data exfiltration, malicious code execution, or prompt injection attempts.
能力评估
Purpose & Capability
Name, description, and included scripts align with a WooshPay payment integration (create payment, checkout sessions, refunds, query). However the registry metadata claims no required env vars while SKILL.md and all scripts require WOOSHPAY_API_KEY (mismatch). SKILL.md also references cancel_payment.py which is not included (missing file).
Instruction Scope
SKILL.md and the scripts are limited to interacting with https://api.wooshpay.com and local interactive prompts. But create_payment.py prints a suggestion to 'tell me your API Key in conversation, I'll help you set it', which explicitly encourages exposing secrets to the agent—this is out of scope for a CLI utility and could lead to secret sharing with the model. Otherwise the scripts only read the WOOSHPAY_API_KEY env var and make HTTP calls to the stated API endpoints.
Install Mechanism
Instruction-only skill with bundled Python scripts; no install spec, no external downloads, and no archive extraction. No install-time risk detected.
Credentials
Only one secret is needed (WOOSHPAY_API_KEY), which is appropriate for a payment gateway client — but the registry metadata does not declare it (inconsistency). Additionally, the code/text that suggests pasting the API key into conversation increases risk of accidental exfiltration. The scripts require a Base64-encoded API key (documented).
Persistence & Privilege
always is false and the skill does not request or modify other skills or agent-wide configuration. It does not persist credentials itself. Autonomous invocation is allowed by default (not flagged alone) — consider whether you want the agent to call these endpoints automatically.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wooshpay - 安装完成后，直接呼叫该 Skill 的名称或使用
/wooshpay触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Expanded documentation and provided official references.
- Added links to official WooshPay API documentation for setup, payment methods, and currencies.
- Expanded list of supported payment methods and currencies, with reference links.
- Clarified quick start steps for obtaining and setting API keys.
- No code or file changes—documentation only.
v1.0.1
- Added support for creating hosted checkout sessions via scripts/create_checkout.py.
- Added refund capability through scripts/refund.py, allowing users to process refunds for eligible payments.
- Updated documentation to reflect new operations: checkout session creation and refunds, including usage notes and supported reasons for refunds.
- Expanded payment methods and currency support details in the documentation.
v1.0.0
v1.0 :Provide the basic capabilities of woospay integration
元数据
常见问题
wooshpay-api 是什么？
WooshPay Payment Gateway Integration. For creating payments, checking order status, processing refunds, and managing checkout sessions. Use scenarios: - Crea... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 325 次。
如何安装 wooshpay-api？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wooshpay」即可一键安装，无需额外配置。
wooshpay-api 是免费的吗？
是的，wooshpay-api 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
wooshpay-api 支持哪些平台？
wooshpay-api 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 wooshpay-api？
由 wooshpay（@wp-ai-dev）开发并维护，当前版本 v1.0.2。
推荐 Skills