Newebpay Checkout

What it does

When your agent uses it

• Integrating payment gateway
• Creating checkout flows
• Building 藍新金流 payment pages

Example prompts

• “Use the newebpay-checkout skill to implement NewebPay MPG checkout integration including AES256 encryption, form submission, and payment callback…”
• “/newebpay-checkout”

Requirements

• Python 3
• Node.js
• A credential in HASH_KEY
• A credential in NEWEBPAY_HASH_KEY
• Pre-approved tools (allowed-tools): Read, Write, Edit, Bash, Grep, Glob

Workflow steps

6 steps, taken from the step headings in SKILL.md.

1. 1確認專案環境
2. 2檢查環境變數
3. 3建立支付模組
4. 4建立支付表單頁面
5. 5建立回調處理
6. 6測試驗證

What it can do on your machine

Read from SKILL.md and the folder at commit 1cd84bd. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves these tools, so the agent can use them without asking each time:

  • Read
  • Write
  • Edit
  • Bash
  • Grep
  • Glob

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md (its code samples are html).

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  Hosts in commands or code, which the agent is likely to contact:

  • ccore.newebpay.com
  • core.newebpay.com

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names these keys or tokens, usually read from environment variables:

  • NEWEBPAY_HASH_KEY

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Newebpay Checkout loads about 850 tokens when it runs, and up to ~17k if it reads all its reference files. Until then it costs about 59 tokens; SKILL.md has 227 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~59

When it runs · the whole SKILL.md, loaded when a task matches

~850

With references · SKILL.md plus every file in references/, read only if the agent opens them

~17k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteMentions a .env fileSKILL.md:59

  搜尋專案中的 `.env` 或設定檔，確認是否已設定：

• NotePre-approves every shell command (allowed-tools: Bash)SKILL.md

  allowed-tools: Read, Write, Edit, Bash, Grep, Glob

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from paid-tw/skills at commit 1cd84bd, republished under its MIT licence (© paid-tw). 227 words, ~850 tokens.

name

newebpay-checkout

description

Implements NewebPay MPG checkout integration including AES256 encryption, form submission, and payment callback handling. Use when integrating payment gateway, creating checkout flows, or building 藍新金流 payment pages.

allowed-tools

Read, Write, Edit, Bash, Grep, Glob

argument-hint

[支付方式: 信用卡/LINE Pay/ATM/超商]

context

fork

agent

general-purpose

disable-model-invocation

true

user-invocable

true

<form method="post" action="https://ccore.newebpay.com/MPG/mpg_gateway">
    <input type="hidden" name="MerchantID" value="{商店代號}">
    <input type="hidden" name="TradeInfo" value="{加密資料}">
    <input type="hidden" name="TradeSha" value="{SHA256簽章}">
    <input type="hidden" name="Version" value="2.3">
    <button type="submit">前往付款</button>
</form>

© paid-tw, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 6 other files (references) in plugins/newebpay/skills/newebpay-checkout of paid-tw/skills.

• SKILL.md
• references/code-examples.md
• references/error-codes.md
• references/mpg-transaction.md
• references/response-parameters.md
• references/troubleshooting.md
• references/use-cases.md

Open the folder on GitHubat commit 1cd84bd