orbit-pay-paypal

Audit PayPal REST API v2 integrations for security and webhook standards.

2|1|Updated Apr 20, 2026
One-click install
npx skills add https://github.com/adityaarsharma/orbit --skill orbit-pay-paypal
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: orbit-pay-paypal
Source: https://github.com/adityaarsharma/orbit/tree/main/skills/orbit-pay-paypal
Command: npx skills add https://github.com/adityaarsharma/orbit --skill orbit-pay-paypal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill addresses the complexity and potential security risks of PayPal's API, ensuring integration follows best practices and current v2 REST and Webhook standards.

Core Features & Use Cases

  • API Version Checking: Validates use of the modern v2 REST API instead of deprecated v1.
  • Smart Buttons Integration: Verifies implementation of Smart Buttons client SDK for a seamless user experience.
  • Server-side Verification: Ensures server-side verification after the onApprove event.
  • Webhook Security: Checks the correct handling and verification of PayPal webhook signatures.
  • IPN Deprecation: Guides the transition from IPN to webhooks for modern practices.
  • Token Caching: Caches OAuth2 tokens to improve efficiency.
  • Sandbox vs Live: Distinguishes between sandbox and live environments.
  • Currency Support: Validates currency support according to the PayPal country policy.

Quick Start

Run the PayPal SDK integration audit for a plugin with the command: /orbit-pay-paypal ~/plugins/my-plugin

Frequently Asked Questions about orbit-pay-paypal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my PayPal REST API integration for security and v2 compliance?

To audit PayPal REST API integration, run this tool against your e-commerce plugin directory. It validates v2 API usage, Smart Buttons, server-side verification, and webhook signature handling to ensure security and compliance.

What is the difference between PayPal IPN and webhooks for payment processing?

PayPal IPN is deprecated, while webhooks represent the modern standard for payment notifications. This audit checks correct webhook signature verification and guides the transition from legacy IPN to current webhook practices.

Does my PayPal Smart Buttons implementation require server-side verification?

Yes, PayPal Smart Buttons require server-side verification after the onApprove event. This audit ensures your integration correctly captures funds server-side rather than relying solely on client-side approval.

How do I cache OAuth2 tokens for a PayPal REST API v2 SDK integration?

Caching OAuth2 tokens improves PayPal REST API efficiency by reducing authentication overhead. This audit verifies that your token caching strategy is implemented correctly to optimize API performance.

Can I use this audit tool for an e-commerce plugin distinguishing sandbox and live environments?

Yes, this audit distinguishes between PayPal sandbox and live environments during the integration check. It validates currency support according to country policy while verifying your e-commerce plugin configuration.