paypalIntegrate PayPal payments with proper webhook verification, OAuth handling, and security validation for checkout flows and subscriptions.
Install via ClawdBot CLI:
clawdbot install ivangdavila/paypalGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
webhook → https://abc123.ngrok.io/webhooks/paypalCalls external URL not in known-safe list
https://api.paypal.com/v1/oauth2/tokenAudited Apr 17, 2026 · audit v1.0
Generated Mar 20, 2026
Online retailers need to securely process customer payments for physical or digital goods. This skill handles creating PayPal orders, verifying payments server-side, and managing webhooks for order status updates like completion or disputes, ensuring PCI compliance and fraud prevention.
SaaS companies require recurring payments for monthly or annual plans. The skill supports setting up subscription plans via PayPal's billing APIs, handling webhooks for subscription events (e.g., renewal, cancellation), and managing OAuth tokens for automated billing cycles.
Platforms like marketplaces or gig economies need to distribute earnings to multiple sellers or freelancers. This skill integrates PayPal Payouts API to send batch payments, verify transaction statuses, and handle webhooks for payout completion or failures, ensuring accurate and timely disbursements.
Charities and nonprofits accept one-time or recurring donations online. The skill enables creating donation buttons, validating contributions server-side to prevent fraud, and using webhooks to track donation events and update donor records automatically.
Digital platforms selling content like courses or media may use authorization holds to reserve funds before delivery. This skill manages AUTHORIZE intents for order creation, captures funds after content access, and handles webhooks for authorization expiration or voiding to prevent revenue loss.
Businesses earn revenue by charging a percentage or fixed fee per transaction processed through PayPal. This model is common in e-commerce and marketplaces, where the skill ensures secure payment handling and webhook verification to track fees accurately and avoid disputes.
Companies generate steady income from recurring subscriptions, such as SaaS or membership sites. The skill supports automated billing cycles via PayPal's subscription APIs, with OAuth token management for renewals and webhooks to handle churn events like cancellations or upgrades.
Platforms take a commission from payouts made to third parties, such as in freelancer marketplaces or affiliate networks. This skill integrates PayPal Payouts API to distribute funds while deducting commissions, with idempotency checks in webhooks to prevent duplicate payments and ensure accurate revenue tracking.
💬 Integration Tip
Always verify webhooks via API calls, not HMAC, and use server-side validation for all payment data to prevent fraud and ensure compliance with PayPal's security requirements.
Scored Apr 18, 2026
Security vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification L...
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Audit a user's current AI tool stack. Score each tool by ROI, identify redundancies, gaps, and upgrade opportunities. Produces a structured report with score...
Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.
Audit codebases and infrastructure for security issues. Use when scanning dependencies for vulnerabilities, detecting hardcoded secrets, checking OWASP top 10 issues, verifying SSL/TLS, auditing file permissions, or reviewing code for injection and auth flaws.
Solve CAPTCHAs using 2Captcha service via CLI. Use for bypassing captchas during web automation, account creation, or form submission.