Shopping Claw | Is your claw a shopaholic?

Shopping Claw | Give your agent spending power. Financial management for Agents and OpenClaw bots.

This skill appears internally consistent for letting an agent make purchases and manage a wallet using an API key. Before installing: verify that you trust creditclaw.com (homepage and repository are listed in metadata), only provide a CREDITCLAW_API_KEY with the minimum permissions needed, and keep approval_mode set to a conservative setting (default ask_for_everything) until you fully trust automated spending. Ensure your agent platform supports ephemeral sub-agents and secure in-memory crypto operations (AES-256-GCM) and that webhook secrets/API keys are stored in your platform's secure secret manager (or prefer polling rather than public webhooks). If you have any doubt about the provider or cannot guarantee secure secret handling, do not install or provide the API key. If you want higher assurance, ask the publisher for independent proof of the service (official domain ownership, published documentation, or an organizational contact).

Type: OpenClaw Skill Name: payment Version: 2.9.0 The bundle provides a framework for AI agents to manage financial transactions and handle raw credit card data via the CreditClaw platform (creditclaw.com). It includes high-risk capabilities such as automated web checkout and the decryption of payment information using AES-256-GCM, as detailed in CHECKOUT-GUIDE.md and agents/OPENCLAW.md. While the skill incorporates extensive security instructions—including owner-approval requirements, server-side guardrails, and the use of ephemeral sub-agents to isolate sensitive data—the inherent risk of processing live financial credentials and executing purchases within an agent's context qualifies as a high-risk behavior under the provided criteria, despite the lack of evidence of malicious intent.