Cash App Pay integration skill. Accept payments via Cash App — the #1 personal finance app in the U.S. Covers the Network API, Customer Request API, Manageme...
Security Analysis
medium confidenceThe skill is an instruction-only Cash App Pay integration and its requested credentials and instructions align with that purpose; there are no install steps or unrelated secret requests, but treat any production API key carefully and test in sandbox first.
Name, description, declared env vars (CASHAPP_CLIENT_ID, CASHAPP_API_KEY), and the SKILL.md content consistently describe a Cash App Pay integration (Customer Request API, Network API, Management API). The credentials requested are what you would expect for this integration.
This is an instruction-only skill that provides API documentation and curl examples for Cash App Pay. The instructions focus on API calls, polling, webhooks, signatures, and dispute evidence submission. There are no directives to read unrelated system files or unrelated environment variables in the visible content.
No install spec and no code files — lowest-risk surface. Nothing will be downloaded or written to disk by an installation step.
Only two env vars are required (CASHAPP_CLIENT_ID, CASHAPP_API_KEY) and the primary credential is the API key, which is appropriate. Be aware that payment APIs often require signing and potentially additional secrets; ensure any signing keys or scoped credentials you provide are the minimum needed and prefer sandbox keys for testing.
always:false (default) and the skill is user-invocable; model invocation is allowed by default. Autonomous invocation is normal, but because this skill can initiate payment-related operations, you should be cautious about granting a production API key without limiting its scope or testing in sandbox first.
Guidance
This skill is coherent with its stated purpose and doesn't request unrelated secrets or perform installs. Before installing: (1) Use sandbox credentials first and test flows (customer requests, payments, webhooks, dispute uploads). (2) If you must provide a production key, prefer a scoped API key with least privilege and rotate/revoke it if needed. (3) Be mindful that the agent can be invoked autonomously — avoid giving full-production credentials until you trust the skill and have monitored logs/transactions. (4) If the Signatures section requires additional secrets not listed, ask the publisher for clarification before supplying them.
Latest Release
v1.0.2
- Expanded and clarified documentation for Cash App Pay integration, featuring API and SDK usage, payment flows, and dispute handling. - Added detailed API references for Customer Request, Network, and Management APIs, including required headers and idempotency. - Included new “Quick Start” guides for setting up brands, merchants, and payments. - Described Pay Kit SDK integration for web, iOS, and Android. - Revised to cover sandbox testing procedures and webhook usage.
More by @codejika
CreditClaw Amazon | Order & Checkout at Amazon.com securely
4 stars
ShopClaw | Give your claw shopping tasks with strict controls
4 stars
CreditClaw | Give your agent a wallet or credit card
2 stars
Perplexity Computer Payments | Make payments with Perplexity Computer
0 stars
MasterCard AgentPay | Compatible compatible cards, wallets & payments
0 stars
Authorize.net Agentic Payments - Add agentic cards and wallets to your stack
0 stars
Published by @codejika on ClawHub
