Title: Shomi Author: antomintegration Published: May 8, 2026 Last modified: May 8, 2026 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/antom-shomi.svg) # Shomi By [antomintegration](https://profiles.wordpress.org/antomintegration/) [Download](https://downloads.wordpress.org/plugin/antom-shomi.1.0.7.zip) * [Details](https://wordpress.org/plugins/antom-shomi/#description) * [Reviews](https://wordpress.org/plugins/antom-shomi/#reviews) * [Installation](https://wordpress.org/plugins/antom-shomi/#installation) * [Development](https://wordpress.org/plugins/antom-shomi/#developers) [Support](https://wordpress.org/support/plugin/antom-shomi/) ## Description Shomi is a WordPress plugin designed for AI agents, providing the following features: * **Secure Communication**: All API interfaces use RSA-SHA256 signature verification * **Product Search**: Support searching products by keywords, returning complete product information * **Order Creation**: Create WooCommerce orders through API * **Order Management**: Query order status, mark orders as paid * **One-click Initialization**: Automatically generate shared key, simplify configuration process * **Anti-replay Attack**: Use timestamp and nonce mechanism to prevent API abuse * **Multilingual Support**: Supports English and Chinese languages, with English as the default This plugin is an important component of the shopping assistant system, tightly integrated with Agent backend service B to achieve end-to-end assistance from product selection to payment. Only authenticated Agent backend service B can call the plugin’s API interfaces, ensuring system security. The plugin mounts Agent frontend components through external CDN to provide shopping assistant functionality. ### External Services This plugin uses external services provided by Antom to deliver the shopping assistant functionality. What the service is used for: – Loading the assistant frontend JavaScript components( CDN delivery) – Sending user messages/inputs to the assistant service to generate responses Domains/resources: – https://gw.alipayobjects.com/render/p/yuyan_npm/@alipay_paymentagent/ 1.0.0/lib/CommonEntry.js – https://gw.alipayobjects.com/render/p/yuyan_npm/@alipay_paymentagent/ 1.0.0/lib/CommonProduct.js – https://dashboard-apiv2.antom.com/ai/online/portal/ api/bot/chat(assistant API) When data is sent: – The CDN scripts are loaded only on frontend pages (never in wp-admin). – User input is sent when a visitor interacts with the assistant (e.g. submits a question or form fields in the assistant UI). What data is sent: – Standard HTTP request data to the CDN/API (e.g. IP address, user agent, referrer, and time of request). – The user’s messages/questions to the assistant and any information the user enters into the assistant UI. Data retention: – Requests are processed to generate a response and are not stored longer than necessary. Terms of Service: https://docs.antom.com/ac/plugins/terms_of_service Privacy Policy: https://docs.antom.com/ac/plugins/privacy_policy ### Security All incoming requests from Antom are secured using RSA-SHA256 digital signatures. Antom signs each request with its private key, and this plugin verifies the signature using the official Antom public key you configure in settings. This ensures requests are authentic and have not been tampered with during transmission. #### Does the plugin support multiple languages? Yes, the plugin supports both English and Chinese languages. English is the default language, and the plugin will automatically use the user’s WordPress language setting. If the user’s language is not supported, it will fall back to English. ## Installation 1. In the WordPress admin panel, go to “Plugins” > “Add New” 2. Search for “Shomi” 3. Click “Install Now” 4. After installation, click “Activate Plugin” 5. Make sure WooCommerce plugin is installed and activated 6. Find “Shomi” in the left menu for initialization settings ## FAQ ### What dependencies does the plugin require? The plugin requires WooCommerce 3.0 or higher. ### How to initialize the plugin? After activating the plugin, find the “Shomi” menu item in the WordPress admin left menu, click to enter the settings page, then fill in the required configuration and click “Verify and Save Configuration” button. ### How does the plugin integrate with the shopping assistant system? This plugin serves as the WordPress component of the shopping assistant system, working with Agent backend service B: 1. Users select products through the shopping assistant 2. Agent backend service B calls plugin API to create orders 3. Users complete the payment process 4. Agent backend service B can query order status ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Shomi” is open source software. The following people have contributed to this plugin. Contributors * [ antomintegration ](https://profiles.wordpress.org/antomintegration/) [Translate “Shomi” into your language.](https://translate.wordpress.org/projects/wp-plugins/antom-shomi) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/antom-shomi/), check out the [SVN repository](https://plugins.svn.wordpress.org/antom-shomi/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/antom-shomi/) by [RSS](https://plugins.trac.wordpress.org/log/antom-shomi/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. * Added shopping assistant features: product search, order creation, and order management. * Implemented RSA-SHA256 request signature verification. * Added anti-replay protection. * Added multilingual support (English and Chinese). #### 1.0.1 * Improved the admin settings page UI and overall user experience. #### 1.0.2 * Updated documentation to include external service disclosures. * Added links to the Terms of Service and Privacy Policy. #### 1.0.3 * Ensured Terms of Service and Privacy Policy links are directly accessible and properly disclosed in the External Services section. * Standardized External Services section title for compliance. #### 1.0.4 * Fixed a critical security issue in REST API authentication. - Sensitive endpoints now require valid signature headers to access. - Removed incorrect early return that allowed unauthenticated access. #### 1.0.5 * Updated the plugin name, description, and slug * Unified the text domain to antom-shomi * Updated the text domain in related internationalization files #### 1.0.6 * Refactored API authentication logic for better security and simplicity - Frontend requests: WooCommerce Session Cookie validation (HttpOnly, secure) - Backend requests: RSA-SHA256 signature authentication with timestamp and nonce - Removed wp-api-token implementation (insecure when exposed in frontend JavaScript) - Automatic detection: requests with signature headers = backend, without = frontend * Removed deprecated openssl_free_key() call (deprecated in PHP 8.0+) * Updated plugin icon from SVG to PNG format for WordPress.org compatibility * Minor code cleanup and documentation improvements #### 1.0.7 * Addressed WordPress plugin review security feedback - Clarified `/session/key` endpoint as public API with `__return_true` permission callback (returns identity token only, no direct auth bypass) - Documented that `wp_set_current_user()` is only called after successful RSA signature verification and identity token validation - Enhanced code comments to explain the multi-layer authentication flow - No functional changes – security model already meets WordPress.org requirements ## Meta * Version **1.0.7** * Last updated **7 hours ago** * Active installations **Fewer than 10** * WordPress version ** 5.6 or higher ** * Tested up to **6.9.4** * PHP version ** 7.4 or higher ** * Tags * [agent](https://wordpress.org/plugins/tags/agent/)[antom](https://wordpress.org/plugins/tags/antom/) [payment](https://wordpress.org/plugins/tags/payment/)[Shopping Assistant](https://wordpress.org/plugins/tags/shopping-assistant/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/antom-shomi/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/antom-shomi/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/antom-shomi/reviews/) ## Contributors * [ antomintegration ](https://profiles.wordpress.org/antomintegration/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/antom-shomi/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://www.antom.com)