首页龙虾技能列表 › Checkout.com - Integrate with Agentic Payments & Wallets

Checkout.com - Integrate with Agentic Payments & Wallets

v1.2.1

Paypal compatible Payments & Wallet - Give your agent spending power. Financial management for Agents and OpenClaw bots.

0· 227·0 当前·0 累计
by @jononovo·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/14
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's declared purpose (give an agent spending power via CreditClaw) matches its instructions and required credential, but there are a few incoherences and high-risk operational details you should understand before installing.
评估建议
This skill appears to implement a legitimate payments integration for a service hosted at creditclaw.com and only asks for one API key, which is expected. Key points before installing: 1) Verify the naming mismatch — the registry entry mentions 'Checkout.com' while the skill uses 'CreditClaw' and creditclaw.com; confirm you are intentionally granting access to CreditClaw and not another provider. 2) Treat CREDITCLAW_API_KEY as a high-value secret: only provide it if you trust creditclaw.com and ...
详细分析 ▾
用途与能力
The skill's functionality (creating checkout pages, invoices, wallet signing, encrypted-card checkout) is coherent with requesting a single CREDITCLAW_API_KEY. However the skill title and registry name reference 'Checkout.com' while every file and the homepage use 'creditclaw.com' / 'CreditClaw' — a naming/branding mismatch that could be accidental or misleading. Aside from the naming inconsistency, the requested credential is proportionate to the described payment functionality.
指令范围
SKILL.md and companion files explicitly instruct the agent to call many CreditClaw endpoints (balance, checkout, encrypted-card key retrieval), receive or poll webhooks/messages for encrypted owner card payloads, retrieve one-time decryption keys, perform AES-256-GCM decryption in-memory, and use decrypted card data to perform merchant checkouts. All of this is within the declared purpose, but it grants the agent the ability to handle high-value secrets (owner card details) and to initiate real purchases. The instructions also tell the agent to fetch additional docs from external URLs at runtime, which introduces a runtime network-dependency and potential update-time change in behavior.
安装机制
This is instruction-only with no install spec and no code files to be written or executed on the host. That minimizes install-time risk. Runtime network calls to creditclaw.com are required per the docs.
凭证需求
Only a single environment variable/credential is required: CREDITCLAW_API_KEY. That is appropriate for a payments API. No unrelated credentials, system paths, or extra secrets are requested in the metadata.
持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. However, it grants an agent the capability to autonomously make or request purchases when invoked. Combined with the instruction-level ability to decrypt and use card data and to sign x402 payments, this gives the skill significant real-world effect — ensure approval_mode and spending limits are configured before enabling autonomous use.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.2.12026/3/13

**Major update: CreditClaw payment rail integration replaces classic PayPal focus.** - Added new skill files covering encrypted card checkout, Stripe x402 wallet, Crossmint wallet, financial management, and heartbeat check routines - Transitioned from PayPal API integration to CreditClaw’s multi-rail payment and wallet platform for agents and bots - Replaced previous detailed PayPal webhooks, OAuth, and API patterns with CreditClaw’s security, registration, payment flows, and approval models - Emphasized robust security guardrails, spending approvals, and owner control over agent financial activity - Updated documentation to reference new endpoints, usage instructions, and file structure; removed legacy PayPal documentation files

● 可疑

安装命令 点击复制

官方npx clawhub@latest install checkout
镜像加速npx clawhub@latest install checkout --registry https://cn.clawhub-mirror.com
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务