← Back to Skills Marketplace
triplehippo

Shop from Samsung - With your creditcard

by TripleHippo · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
250
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install samsung
Description
Let your agent shop online with guardrailed wallets, multiple payment methods, and owner approval.
Usage Guidance
This skill appears to do what it says: it uses CREDITCLAW_API_KEY to let an agent place guarded purchases. That also means the API key is powerful — anyone who gets it can attempt purchases. Before installing: 1) Verify the legitimacy of https://creditclaw.com and that you trust the service. 2) Only provide a scoped or test API key with minimal funds initially; do not use a primary funding credential. 3) Keep the owner's approval mode set to require explicit approval for purchases (ask_for_everything) until you’re confident. 4) Review any files downloaded into ~/.creditclaw before executing or trusting them. 5) Monitor activity and notifications from the owner dashboard and revoke the API key if you see unexpected requests. If you cannot accept any risk of automated spending, do not install or do not supply a live API key.
Capability Analysis
Type: OpenClaw Skill Name: samsung Version: 1.0.0 The skill bundle provides a comprehensive and well-documented interface for an AI agent to perform online purchases via the CreditClaw service. It includes detailed instructions for registration, status monitoring, and various payment rails (Amazon, Shopify, and SaaS), emphasizing security through server-side guardrails, human-in-the-loop activation, and explicit warnings against API key leakage. While it provides shell commands for the agent to download additional documentation from creditclaw.com, the behavior is consistent with the stated purpose of a commerce-enabled agent and lacks indicators of malicious intent or unauthorized data access.
Capability Assessment
Purpose & Capability
The name/description (agent shopping with guardrailed wallets) matches the declared requirement (CREDITCLAW_API_KEY) and the SKILL.md content — all endpoints and files are on creditclaw.com. No unrelated env vars, binaries, or configs are requested.
Instruction Scope
SKILL.md tells the agent to call CreditClaw API endpoints (purchase, checkout, sign, status checks) and to perform shopping tasks (ASIN discovery, variant lookup). It also includes curl commands to download the skill documentation into ~/.creditclaw/skills. The instructions do not ask the agent to read unrelated local files or to send the API key to external domains (in fact they explicitly warn against that). The heartbeat/top-up flows and polling behavior are expected for a payments integration but increase automation scope.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md suggests using curl to fetch multiple documents from https://creditclaw.com into the user's home directory. All downloads come from the same domain listed as the homepage; no archive extraction or third-party shorteners are used. Downloading and writing remote content to disk is expected here but carries the usual risk of trusting that domain's content.
Credentials
Only a single env var (CREDITCLAW_API_KEY) is required — this is proportionate to the stated purpose because the API key is how the agent authenticates to the payment service. However, this is a high-value secret: possession of the key can enable spending on behalf of the owner, so it must be protected and scoped appropriately (use limited/test wallets, enforce owner approval).
Persistence & Privilege
always:false (good) and the skill is user-invocable, but disable-model-invocation is false so the agent may invoke the skill autonomously. Combined with the ability to initiate purchases, periodic heartbeats, and top-up requests, autonomous invocation increases blast radius if approval modes are relaxed. The platform defaults and server-side guardrails help, but the real-world risk depends on the owner's approval settings and wallet funding.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install samsung
  3. After installation, invoke the skill by name or use /samsung
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
CreditClaw skill v2.3.1 introduces secure, guardrailed payment capabilities for AI agents. - Allows agents to shop online with multiple payment methods and owner approval. - Supports Amazon, Shopify, SaaS, cloud hosting, general stores, and agent-to-agent payments via Pre-paid Wallet, Self-Hosted Card, and Stripe x402 Wallet. - Comprehensive payment method guides and API references included via dedicated documentation files. - Default human-in-the-loop approval for all purchases; adjustable by owner. - Strong security measures: API keys are hashed, per-transaction guardrails enforced server-side, extensive audit logging, and Stripe-based payment handling.
Metadata
Slug samsung
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Shop from Samsung - With your creditcard?

Let your agent shop online with guardrailed wallets, multiple payment methods, and owner approval. It is an AI Agent Skill for Claude Code / OpenClaw, with 250 downloads so far.

How do I install Shop from Samsung - With your creditcard?

Run "/install samsung" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Shop from Samsung - With your creditcard free?

Yes, Shop from Samsung - With your creditcard is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Shop from Samsung - With your creditcard support?

Shop from Samsung - With your creditcard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Shop from Samsung - With your creditcard?

It is built and maintained by TripleHippo (@triplehippo); the current version is v1.0.0.

💬 Comments