Skills paypal-integration
📦

paypal-integration

Content revision r1 High Risk ⚙️ External commands🌐 Network access

Build PayPal Checkout and Billing Flows

Payment integrations can fail when checkout, subscriptions, refunds, and webhooks are handled separately. This skill gives practical PayPal patterns for building and reviewing those flows.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "paypal-integration" from https://skillstore.io/skills/sickn33-paypal-integration.md and its manifest at https://skillstore.io/api/skills/sickn33-paypal-integration/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-paypal-integration.md Signed manifest GET /api/skills/sickn33-paypal-integration/manifest Signed lockfile GET /api/skills/sickn33-paypal-integration/lockfile

Test it

Using "paypal-integration". A developer asks for one-time PayPal checkout for a cart.

Expected outcome:

  • A checkout flow with server-created orders and client approval.
  • A validation checklist for amount, currency, status, merchant, and duplicate capture.
  • Sandbox test cases for successful payment, cancellation, and failed capture.

Using "paypal-integration". A SaaS team asks for recurring billing guidance.

Expected outcome:

  • A subscription plan workflow with product, plan, subscriber, and approval steps.
  • Event handling notes for renewals, failed payments, cancellations, and refunds.
  • Operational checks for plan identifiers, customer records, and billing status.

Using "paypal-integration". A support team asks how to process refunds.

Expected outcome:

  • A refund workflow for full and partial refunds.
  • A transaction lookup process for support review.
  • A dispute response checklist with logging and customer notification steps.

Security Audit

High Risk
v4 • 7/7/2026 Open versioned report

Static command detections are false positives caused by Markdown code fences and inline resource paths. The network findings are expected PayPal and local callback examples, with no evidence of exfiltration or prompt injection. Two high-severity semantic issues were added for payment flows that omit server-side amount, merchant, and IPN business validation.

1
Files scanned
480
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

High
SKILL.md:73-92SKILL.md:111-121
Client-Side Payment Amount Can Be Tampered
The quick-start creates the order amount in browser code and captures using only the submitted order ID. A copied implementation could allow users to change amount or currency before capture because server-side validation is not shown.
The cited flow places the value in client code and returns captured amount without comparing it to a trusted order record. PayPal integrations can be safe if the author adds validation, so confidence is high but not absolute.
High
SKILL.md:217-226SKILL.md:247-261
Incomplete IPN Business Validation
The IPN example verifies the message with PayPal, then processes completed payments without checking receiver identity, expected amount, currency, or order mapping. A copied implementation could fulfill goods for a mismatched payment notification.
The code gates on PayPal VERIFIED and payment_status, then reaches fulfillment comments. It is illustrative documentation, so confidence is high but not absolute.

Risk Factors

⚙️ External commands (16)
SKILL.md:20 SKILL.md:67-98 SKILL.md:98-100 SKILL.md:100-128 SKILL.md:128-133 SKILL.md:133-199 SKILL.md:199-204 SKILL.md:204-278 SKILL.md:278-283 SKILL.md:283-357 SKILL.md:357-361 SKILL.md:361-396 SKILL.md:396-400 SKILL.md:400-423 SKILL.md:423-427 SKILL.md:427-451
🌐 Network access (16)
SKILL.md:89 SKILL.md:149 SKILL.md:176 SKILL.md:187 SKILL.md:197 SKILL.md:243 SKILL.md:323 SKILL.md:347 SKILL.md:382 SKILL.md:394 SKILL.md:410 SKILL.md:71 SKILL.md:141 SKILL.md:241 SKILL.md:342 SKILL.md:343
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-paypal-integration/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-paypal-integration/security.svg)](https://skillstore.io/skills/sickn33-paypal-integration?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-paypal-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-paypal-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-paypal-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). paypal-integration security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-paypal-integration/audits/4

BibTeX citation

@techreport{sickn33-sickn33-paypal-integration-2026, author = {sickn33}, title = {paypal-integration security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/sickn33-paypal-integration/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "paypal-integration security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-07" url: "https://skillstore.io/skills/sickn33-paypal-integration/audits/4" identifiers: - type: other value: "skillstore:sickn33-paypal-integration:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
wshobson Recommended

wshobson-paypal-integration

Skillstore Score 70
Evidence Confidence High
Skillstore usage 13
Updated

2026-08-21

sickn33 Current

sickn33-paypal-integration

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
91
Spec Compliance

What You Can Build

Add Store Checkout

Plan a PayPal one-time payment flow for products, carts, and server-side capture.

Launch Subscription Billing

Design recurring PayPal plans, subscriber approval links, and renewal handling.

Operate Refunds And Disputes

Map refund requests, chargeback events, and transaction lookup steps.

Try These Prompts

Start Checkout 
Implement PayPal Checkout for a small store that sells fixed-price products. Include server-created orders, capture validation, and sandbox testing steps.
Handle IPN Events 
Design PayPal IPN handling for completed payments, refunds, and chargebacks. Include verification, duplicate prevention, and order update rules.
Create Subscriptions 
Build a PayPal subscription flow for monthly plans. Include plan creation, approval routing, renewal tracking, and cancellation handling.
Review Production Readiness 
Review my PayPal integration design before launch. Check server validation, credential handling, error handling, retries, logging, and sandbox coverage.

Best Practices

  • Create and capture orders from trusted server data, then verify amount, currency, merchant, and status.
  • Use PayPal sandbox and test buyer and seller accounts before using live credentials.
  • Handle duplicate notifications, refunds, reversals, and network failures idempotently.

Avoid

  • Do not trust browser callbacks as proof of payment.
  • Do not hardcode live credentials or environment URLs in application source.
  • Do not fulfill orders before server-side PayPal verification completes.

Frequently Asked Questions

Does this skill create a complete PayPal application?
No. It provides integration patterns and examples that must be adapted to your application.
Does it cover PayPal Checkout?
Yes. It includes Smart Buttons, order creation, order capture, and order detail lookup patterns.
Does it support subscriptions?
Yes. It includes examples for subscription plans, subscriber creation, and approval links.
Does it handle refunds?
Yes. It includes refund creation and refund detail lookup guidance.
Can I use the examples in production without changes?
No. Add server-side validation, secure credential storage, authentication, logging controls, and complete error handling.
Which AI tools can use this skill?
The report lists support for Claude, Codex, and Claude Code.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/paypal-integration

Ref

816c62b2546ddb1c6a0453e7c781b5e095117819

Maintenance freshness

7/18/2026

Usage

7 downloads · 105 views

File structure

📄 SKILL.md