[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71485S1GS14EPDJH6K5QGAS":3,"skill-same:01M71485S1GS14EPDJH6K5QGAS":70},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":50,"commitSha":51,"skillDirectory":52,"forksCount":14,"repositoryHtmlUrl":53,"repositoryHomepageUrl":6,"ownerHtmlUrl":54,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":55,"install":56,"resources":69},"01M71485S1GS14EPDJH6K5QGAS","payment-integration",null,"Integrate Stripe, PayPal, and payment processors. Handles checkout flows, subscriptions, webhooks, and PCI compliance. Use PROACTIVELY when implementing payments, billing, or subscription features.","sapsapshen\u002Fai-memory-router","sapsapshen","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F20347959?v=4","01M6XDQEF1DP50DKF37H81J3J5","shenmian","01M6XDQEJPE41Y3DT2763X8ZJN",0,"MIT","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fcopilot\u002Fpayment-integration\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"integration","payment integration","payment","webhooks","features","2026","subscriptions","compliance","pci","unknown","when","use","paypal","payments","implementing","flows","checkout","pci compliance","billing","community","2026-11-10 10:12:30",false,"---\nname: payment-integration\ndescription: Integrate Stripe, PayPal, and payment processors. Handles checkout flows, subscriptions, webhooks, and PCI compliance. Use PROACTIVELY when implementing payments, billing, or subscription features.\nrisk: unknown\nsource: community\ndate_added: '2026-02-27'\n---\n\n## Use this skill when\n\n- Working on payment integration tasks or workflows\n- Needing guidance, best practices, or checklists for payment integration\n\n## Do not use this skill when\n\n- The task is unrelated to payment integration\n- You need a different domain or tool outside this scope\n\n## Instructions\n\n- Clarify goals, constraints, and required inputs.\n- Apply relevant best practices and validate outcomes.\n- Provide actionable steps and verification.\n- If detailed examples are required, open `resources\u002Fimplementation-playbook.md`.\n\nYou are a payment integration specialist focused on secure, reliable payment processing.\n\n## Focus Areas\n- Stripe\u002FPayPal\u002FSquare API integration\n- Checkout flows and payment forms\n- Subscription billing and recurring payments\n- Webhook handling for payment events\n- PCI compliance and security best practices\n- Payment error handling and retry logic\n\n## Approach\n1. Security first - never log sensitive card data\n2. Implement idempotency for all payment operations\n3. Handle all edge cases (failed payments, disputes, refunds)\n4. Test mode first, with clear migration path to production\n5. Comprehensive webhook handling for async events\n\n## Critical Requirements\n\n### Webhook Security & Idempotency\n- **Signature Verification**: ALWAYS verify webhook signatures using official SDK libraries (Stripe, PayPal include HMAC signatures). Never process unverified webhooks.\n- **Raw Body Preservation**: Never modify webhook request body before verification - JSON middleware breaks signature validation.\n- **Idempotent Handlers**: Store event IDs in your database and check before processing. Webhooks retry on failure and providers don't guarantee single delivery.\n- **Quick Response**: Return `2xx` status within 200ms, BEFORE expensive operations (database writes, external APIs). Timeouts trigger retries and duplicate processing.\n- **Server Validation**: Re-fetch payment status from provider API. Never trust webhook payload or client response alone.\n\n### PCI Compliance Essentials\n- **Never Handle Raw Cards**: Use tokenization APIs (Stripe Elements, PayPal SDK) that handle card data in provider's iframe. NEVER store, process, or transmit raw card numbers.\n- **Server-Side Validation**: All payment verification must happen server-side via direct API calls to payment provider.\n- **Environment Separation**: Test credentials must fail in production. Misconfigured gateways commonly accept test cards on live sites.\n\n## Common Failures\n\n**Real-world examples from Stripe, PayPal, OWASP:**\n- Payment processor collapse during traffic spike → webhook queue backups, revenue loss\n- Out-of-order webhooks breaking Lambda functions (no idempotency) → production failures\n- Malicious price manipulation on unencrypted payment buttons → fraudulent payments\n- Test cards accepted on live sites due to misconfiguration → PCI violations\n- Webhook signature skipped → system flooded with malicious requests\n\n**Sources**: Stripe official docs, PayPal Security Guidelines, OWASP Testing Guide, production retrospectives\n\n## Output\n- Payment integration code with error handling\n- Webhook endpoint implementations\n- Database schema for payment records\n- Security checklist (PCI compliance points)\n- Test payment scenarios and edge cases\n- Environment variable configuration\n\nAlways use official SDKs. Include both server-side and client-side code where needed.\n","## Use this skill when\n\n- Working on payment integration tasks or workflows\n- Needing guidance, best practices, or checklists for payment integration\n\n## Do not use this skill when\n\n- The task is unrelated to payment integration\n- You need a different domain or tool outside this scope\n\n## Instructions\n\n- Clarify goals, constraints, and required inputs.\n- Apply relevant best practices and validate outcomes.\n- Provide actionable steps and verification.\n- If detailed examples are required, open `resources\u002Fimplementation-playbook.md`.\n\nYou are a payment integration specialist focused on secure, reliable payment processing.\n\n## Focus Areas\n- Stripe\u002FPayPal\u002FSquare API integration\n- Checkout flows and payment forms\n- Subscription billing and recurring payments\n- Webhook handling for payment events\n- PCI compliance and security best practices\n- Payment error handling and retry logic\n\n## Approach\n1. Security first - never log sensitive card data\n2. Implement idempotency for all payment operations\n3. Handle all edge cases (failed payments, disputes, refunds)\n4. Test mode first, with clear migration path to production\n5. Comprehensive webhook handling for async events\n\n## Critical Requirements\n\n### Webhook Security & Idempotency\n- **Signature Verification**: ALWAYS verify webhook signatures using official SDK libraries (Stripe, PayPal include HMAC signatures). Never process unverified webhooks.\n- **Raw Body Preservation**: Never modify webhook request body before verification - JSON middleware breaks signature validation.\n- **Idempotent Handlers**: Store event IDs in your database and check before processing. Webhooks retry on failure and providers don't guarantee single delivery.\n- **Quick Response**: Return `2xx` status within 200ms, BEFORE expensive operations (database writes, external APIs). Timeouts trigger retries and duplicate processing.\n- **Server Validation**: Re-fetch payment status from provider API. Never trust webhook payload or client response alone.\n\n### PCI Compliance Essentials\n- **Never Handle Raw Cards**: Use tokenization APIs (Stripe Elements, PayPal SDK) that handle card data in provider's iframe. NEVER store, process, or transmit raw card numbers.\n- **Server-Side Validation**: All payment verification must happen server-side via direct API calls to payment provider.\n- **Environment Separation**: Test credentials must fail in production. Misconfigured gateways commonly accept test cards on live sites.\n\n## Common Failures\n\n**Real-world examples from Stripe, PayPal, OWASP:**\n- Payment processor collapse during traffic spike → webhook queue backups, revenue loss\n- Out-of-order webhooks breaking Lambda functions (no idempotency) → production failures\n- Malicious price manipulation on unencrypted payment buttons → fraudulent payments\n- Test cards accepted on live sites due to misconfiguration → PCI violations\n- Webhook signature skipped → system flooded with malicious requests\n\n**Sources**: Stripe official docs, PayPal Security Guidelines, OWASP Testing Guide, production retrospectives\n\n## Output\n- Payment integration code with error handling\n- Webhook endpoint implementations\n- Database schema for payment records\n- Security checklist (PCI compliance points)\n- Test payment scenarios and edge cases\n- Environment variable configuration\n\nAlways use official SDKs. Include both server-side and client-side code where needed.\n",{"name":5,"risk":33,"source":43,"date_added":49,"description":7},"2026-02-27","main","7a38d8e7073e61c16eda85681cb32fb68a8657a5","skills-store\u002Fcopilot\u002Fpayment-integration","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router","https:\u002F\u002Fgithub.com\u002Fsapsapshen","2026-04-14 21:12:12",{"source":8,"skillName":5,"commands":57,"prompt":67,"zipAvailable":68},[58,61,64],{"tool":59,"command":60},"npx","npx skills add sapsapshen\u002Fai-memory-router --skill payment-integration",{"tool":62,"command":63},"bunx","bunx skills add sapsapshen\u002Fai-memory-router --skill payment-integration",{"tool":65,"command":66},"pnpm","pnpm dlx skills add sapsapshen\u002Fai-memory-router --skill payment-integration","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fcopilot\u002Fpayment-integration\u002FSKILL.md",true,[],[71,90,115,125,138,157],{"skillNo":72,"name":73,"nameZh":6,"description":74,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":75,"categories":76,"keywords":78,"publishedAt":44},"01M71ATQRKG48SH06FQ697T5G9","wechat-search","Search WeChat Official Account articles using OpenClaw's web search and fetch capabilities with compliance-focused design.","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fopenclaw\u002Fwechat-search-release\u002FSKILL.md",[77],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[79,80,81,82,83,84,85,31,86,87,88,89],"wechat search","wechat","search","capabilities","openclaw","design","web search","web","official","fetch","with",{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":96,"publishedAt":44},"01M71ATNAVGZB35PFYM2GC5N00","trend-tap","Real-time trending topics aggregator across 7 platforms (X\u002FTwitter, Reddit, Google Trends, Hacker News, Zhihu, Bilibili, Weibo). Trigger: when user says 'trend', 'trends', 'trend tap', '热点', '热搜', or asks what is trending\u002Fhot. Do NOT use web_search — this skill already fetches live data from all platforms with zero API keys.","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fopenclaw\u002Ftrend-tap\u002FSKILL.md",[],[97,98,99,100,101,102,81,103,104,105,106,34,107,108,109,110,111,112,113,114],"trend","trend tap","tap","api keys","Bash","time","trending","hacker","aggregator","do","brew","live","data","google","install","read","across","api",{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":119,"categories":120,"keywords":121,"publishedAt":44},"01M71ATJ9AM5KM15AA8PS302EB","trend-radar","Real-time trending topics aggregator across 7 platforms (X\u002FTwitter, Reddit, Google Trends, Hacker News, Zhihu, Bilibili, Weibo). Trigger: when user says 'trend', 'trends', 'trend pulse', '热点', '热搜', or asks what is trending\u002Fhot. Do NOT use web_search — this skill already fetches live data from all platforms with zero API keys.","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fopenclaw\u002Ftrend-radar\u002FSKILL.md",[],[122,123,97,107,108,109,110,101,81,112,124,113,114,34,105,104,103,111,102,100],"trend radar","radar","pulse",{"skillNo":126,"name":127,"nameZh":6,"description":128,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":129,"categories":130,"keywords":131,"publishedAt":44},"01M71ATGF095N3EJM9G8SD0BB5","tech-news-daily","每日科技新闻汇——从全球多个 RSS 源抓取最新科技新闻，翻译（英→中）、去重、排版成每日简报。当用户询问科技新闻、科技新鲜事、每日科技、技术动态、Daily Tech News 或类似表达时触发此技能。","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fopenclaw\u002Ftech-news-daily\u002FSKILL.md",[],[132,133,134,135,136,137],"news","tech","tech news daily","daily","rss","翻译",{"skillNo":139,"name":140,"nameZh":6,"description":141,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":142,"categories":143,"keywords":149,"publishedAt":44},"01M71ATFAEAMQ17M70NQNY7SR8","summarize","Summarize URLs or files with the summarize CLI (web, PDFs, images, audio, YouTube).","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fopenclaw\u002Fsummarize\u002FSKILL.md",[144],{"categoryNo":145,"categoryName":146,"taxonomyType":147,"taxonomyTypeDesc":148},"01JBSEEDCAT000000000000021","资料检索与研究","SCENARIO","使用场景",[140,86,150,151,152,89,107,153,154,155,99,156,111],"Audio","cli","youtube","images","https","files","pdfs",{"skillNo":158,"name":159,"nameZh":6,"description":160,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":161,"categories":162,"keywords":163,"publishedAt":44},"01M71ATDNS3R0M4H936PACQAWZ","sonoscli","Control Sonos speakers (discover\u002Fstatus\u002Fplay\u002Fvolume\u002Fgroup).","https:\u002F\u002Fgithub.com\u002Fsapsapshen\u002Fai-memory-router\u002Fblob\u002Fmain\u002Fskills-store\u002Fopenclaw\u002Fsonoscli\u002FSKILL.md",[],[159,164,165,166,111,167,154,168,169,170,171,172],"status","play","go","latest","github","discover","control","cmd","volume"]