← Back to Skills Marketplace
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.
83
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install x402-card
Description
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set...
Usage Guidance
This skill appears to do what it says (create virtual cards by signing payments), but exercise caution before using it with a wallet that holds real funds. Specific recommendations:
- Use a dedicated, low-value wallet for card purchases — do not use your main wallets.
- Prefer setting the private key in a local config file with strict permissions or an environment variable rather than passing it as a CLI flag (flags can be stored in shell history or visible in process lists).
- Review the npm package @aeon-ai-pay/x402-card and its GitHub repo (verify publisher, recent commits, and package integrity) before running npx commands. The skill's auto-upgrade runs npx upgrade and can fetch/execute new code without further prompts — consider disabling or scrutinizing upgrades.
- If possible, use a signing device or hardware wallet flow rather than embedding raw private keys in files/flags.
- Don’t store large balances in the wallet used with this skill; test with small amounts first. If you want, provide the package source or the npm package link so a further code-level review can reduce uncertainty.
Capability Analysis
Type: OpenClaw Skill
Name: x402-card
Version: 1.0.0
The skill manages sensitive EVM private keys and executes remote code via 'npx @aeon-ai-pay/x402-card', which presents a high risk of credential theft if the remote package is compromised. It explicitly instructs the AI agent to solicit the user's private key and store it in a local configuration file (~/.x402-card/config.json), while also mandating background 'auto-upgrades' via the same npx package. While these actions are consistent with the stated goal of facilitating crypto-based virtual card purchases, the combination of handling raw secrets and executing unpinned remote code is a significant security risk.
Capability Assessment
Purpose & Capability
The skill is for buying virtual cards via an x402 HTTP/blockchain flow and needs an EVM private key and Node/npx to sign payments and run the published CLI. Requesting EVM_PRIVATE_KEY and node/npx is consistent with the stated purpose.
Instruction Scope
Runtime instructions direct the agent to run npx @aeon-ai-pay/x402-card commands (setup, create, status) and to store the private key in ~/.x402-card/config.json. They also instruct an automatic background 'upgrade --check' that may trigger an 'upgrade' run. The background auto-upgrade and the explicit suggestion to pass private keys on CLI flags (which can leak to shell history or process listings) expand the risk surface beyond just local signing and status checks.
Install Mechanism
There is no bundled code; the skill repeatedly instructs running npx which downloads and executes code from the npm registry at runtime. That is a normal pattern for CLI tools but it means arbitrary code can be fetched/ran (especially via the auto-upgrade path) — a higher-risk install mechanism compared with instruction-only local actions.
Credentials
Only EVM_PRIVATE_KEY is declared as the primary credential, which is proportionate to signing payments. However, handling private keys via CLI flags, env vars, and a local config file increases exposure; the SKILL.md's assurances (masked display, stored with 600 perms) are helpful but do not eliminate risk of accidental leakage or exfiltration if the remotely fetched CLI is malicious or compromised.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. The notable behavior is running a one-per-session background auto-upgrade check which can autonomously fetch/execute code; this increases runtime privilege but is limited to the skill's own CLI workflow.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install x402-card - After installation, invoke the skill by name or use
/x402-card - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
x402-card v1.0.0 – Initial Release
- Enables users to purchase virtual Visa/Mastercard debit cards using USDT on BSC via the x402 protocol.
- Supports card creation, status checking, wallet setup, and protocol information through a unified CLI tool.
- Ensures secure wallet configuration, amount confirmation, and safe handling of private keys.
- Enforces pre-flight checks, amount limits from backend, and explicit user confirmation before card purchase.
- Provides clear guidance for insufficient USDT balance and secure configuration management.
Metadata
Frequently Asked Questions
What is Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.?
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set... It is an AI Agent Skill for Claude Code / OpenClaw, with 83 downloads so far.
How do I install Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.?
Run "/install x402-card" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. free?
Yes, Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. support?
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.?
It is built and maintained by yuanyongm (@yuanyongm); the current version is v1.0.0.
More Skills