Skills paypal-integration
📦

paypal-integration

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Build PayPal Checkout and Billing Flows

PayPal payments require correct checkout, verification, billing, and refund handling. This skill provides implementation patterns for PayPal APIs, IPN validation, subscriptions, and sandbox testing.

Supports: Claude Codex Code(CC)
📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "paypal-integration" from https://skillstore.io/skills/wshobson-paypal-integration.md and its manifest at https://skillstore.io/api/skills/wshobson-paypal-integration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/wshobson-paypal-integration.md Signed manifest GET /api/skills/wshobson-paypal-integration/manifest Signed lockfile GET /api/skills/wshobson-paypal-integration/lockfile

Test it

Using "paypal-integration". Plan a PayPal checkout for a 25 USD product.

Expected outcome:

A checkout plan with Smart Buttons, server order creation, capture verification, and sandbox test steps.

Using "paypal-integration". Design IPN processing for payments and refunds.

Expected outcome:

An event handling outline that verifies PayPal messages, prevents duplicate processing, and routes each payment state.

Using "paypal-integration". Add monthly PayPal subscriptions to a SaaS product.

Expected outcome:

A subscription workflow covering plan creation, subscriber approval, callback URLs, and refund support.

Security Audit

Medium Risk
v8 • 7/8/2026 Open versioned report

The static command-execution findings are Markdown code fences, not executable shell commands. The network findings are expected PayPal SDK, PayPal API, or merchant callback examples, and the reconnaissance hits are transaction field names. One semantic payment-logic issue was found: the IPN example verifies message origin but does not show amount, currency, recipient, and item validation before fulfillment.

1
Files scanned
468
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:205-220SKILL.md:235-249
Incomplete IPN Business Validation
The IPN handler verifies the message with PayPal, then routes completed payments to fulfillment. It does not show validation of amount, currency, receiver account, item, or expected order state before fulfillment.
The code verifies IPN origin and checks duplicate transaction IDs, but the fulfillment path lacks common PayPal business validation checks. This is a clear payment-integrity gap if copied into production.

Risk Factors

⚙️ External commands (15)
SKILL.md:55-86 SKILL.md:86-88 SKILL.md:88-116 SKILL.md:116-121 SKILL.md:121-187 SKILL.md:187-192 SKILL.md:192-266 SKILL.md:266-271 SKILL.md:271-345 SKILL.md:345-349 SKILL.md:349-384 SKILL.md:384-388 SKILL.md:388-411 SKILL.md:411-415 SKILL.md:415-439
🌐 Network access (16)
SKILL.md:77 SKILL.md:137 SKILL.md:164 SKILL.md:175 SKILL.md:185 SKILL.md:231 SKILL.md:311 SKILL.md:335 SKILL.md:370 SKILL.md:382 SKILL.md:398 SKILL.md:59 SKILL.md:129 SKILL.md:229 SKILL.md:330 SKILL.md:331
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/wshobson-paypal-integration/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/wshobson-paypal-integration/security.svg)](https://skillstore.io/skills/wshobson-paypal-integration?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/wshobson-paypal-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wshobson-paypal-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/wshobson-paypal-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

wshobson. (2026). paypal-integration security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wshobson-paypal-integration/audits/8

BibTeX citation

@techreport{wshobson-wshobson-paypal-integration-2026, author = {wshobson}, title = {paypal-integration security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/wshobson-paypal-integration/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "paypal-integration security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "wshobson" date-released: "2026-07-08" url: "https://skillstore.io/skills/wshobson-paypal-integration/audits/8" identifiers: - type: other value: "skillstore:wshobson-paypal-integration:audit:8" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
wshobson Recommended Current

wshobson-paypal-integration

Skillstore Score 70
Evidence Confidence High
Skillstore usage 13
Updated

2026-08-21

sickn33

sickn33-paypal-integration

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Add Checkout to an Online Store

Implement a PayPal button, create orders on the server, and capture approved payments.

Launch Recurring Billing

Create PayPal subscription plans and direct customers to approval links.

Handle Payment Events

Verify IPN messages and route completed, refunded, and reversed payments to business workflows.

Try These Prompts

Create a Basic Checkout 
Use this skill to outline a PayPal Checkout flow for one product priced at [amount] in [currency]. Include frontend and backend steps.
Verify PayPal Orders 
Use this skill to design server-side PayPal order creation and capture for [framework]. Include credential handling and sandbox testing steps.
Process IPN Events 
Use this skill to plan IPN handling for completed payments, refunds, and chargebacks. Include idempotency and validation checks.
Build Subscription and Refund Flows 
Use this skill to design PayPal subscriptions and refund workflows for [business model]. Include approval links, refund lookup, and operational logging.

Best Practices

  • Verify PayPal events on the server before updating orders or granting access.
  • Use sandbox credentials and separate configuration for test and live environments.
  • Store processed transaction identifiers to prevent duplicate fulfillment.

Avoid

  • Do not rely only on client-side payment success callbacks.
  • Do not hardcode live PayPal credentials or production callback URLs in source files.
  • Do not fulfill orders before checking transaction amount, currency, recipient, and status.

Frequently Asked Questions

Does this skill support PayPal Checkout?
Yes. It includes Smart Buttons, server-side order creation, capture, and order detail examples.
Does this skill include subscription billing?
Yes. It shows subscription plan creation and customer approval link handling.
Can I use it for refunds?
Yes. It includes refund creation and refund detail lookup patterns.
Does it manage live credentials for me?
No. You must store PayPal credentials in a secure secrets system or environment configuration.
Is this a complete payment service?
No. It provides implementation guidance and snippets, not a deployable service.
Can I use it with Claude, Codex, and Claude Code?
Yes. The report lists support for Claude, Codex, and Claude Code workflows.

Developer Details

Author

wshobson

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/wshobson/agents/tree/main/plugins/payment-processing/skills/paypal-integration

Ref

64ca8af0f54a325752f08bd54e52151061ea659a

Maintenance freshness

7/22/2026

Usage

11 downloads · 206 views

File structure

📄 SKILL.md