The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documentation references several official and community SDKs for SePay and Polar platforms across multiple programming languages.
Mentions npm install github:sepay/sepay-pg-node for Node.js integration with SePay.
References PHP packages sepay/sepay-pg and sepayvn/laravel-sepay via Composer.
References official Polar SDKs including @polar-sh/sdk (NPM), polar-sdk (PyPI), polar-sh/sdk (Composer), and github.com/polarsource/polar-go (Go).
These references target established payment service providers and are documented for integration purposes.
[INDIRECT_PROMPT_INJECTION]: The utility scripts designed for webhook verification process external JSON payloads which could technically serve as an injection vector if the agent were to process the script output without caution.
Ingestion points: Webhook payloads are passed as CLI arguments to scripts/sepay-webhook-verify.js and scripts/polar-webhook-verify.js.
Boundary markers: The scripts rely on standard JSON.parse() for ingestion without specific LLM boundary markers.
Capability inventory: The verification scripts are restricted to parsing data and logging results to the console; they do not perform network operations or file writes.
Sanitization: Both scripts perform structure validation and cryptographic signature verification (HMAC-SHA256) to ensure data integrity.
[COMMAND_EXECUTION]: The scripts/checkout-helper.js script dynamically generates shell command strings based on user configuration.
It assembles cURL commands for the Polar API, incorporating user-provided parameters like productPriceId and accessToken into the string output.
The script prints these commands to the console for the user/agent to see rather than executing them directly.

payment-integration