← 返回 Skills 市场
elvismusli

AgentFin

作者 elvismusli · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
409
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install agentfin
功能描述
Issue virtual Visa/MC cards funded by USDT. Check balance, get card credentials, fetch OTP codes — all via REST API.
使用说明 (SKILL.md)

AgentFin — Virtual Cards for Agents

You have access to the AgentFin API. Use it to check your balance, get virtual card credentials for online purchases, and fetch OTP codes for 3DS verification.

Authentication

All requests require a Bearer token. Use the AGENTFIN_API_KEY environment variable.

Authorization: Bearer $AGENTFIN_API_KEY

Base URL: https://agentfin.tech/api

Endpoints

Check Balance & Card Status

curl -H "Authorization: Bearer $AGENTFIN_API_KEY" \
  https://agentfin.tech/api/me

Response includes balance (USD string), card object with maskedPan and status, and depositAddress for USDT top-ups.

Get Card Credentials (for online purchases)

curl -H "Authorization: Bearer $AGENTFIN_API_KEY" \
  https://agentfin.tech/api/cards/{cardId}/sensitive

Returns pan, cvv, expiryMonth, expiryYear, cardHolderName, billingAddress. Rate limited to 10 requests/minute.

Important: Use the cardId from the /api/me response (card.cardId field).

Fetch Latest OTP Code (for 3DS verification)

curl -H "Authorization: Bearer $AGENTFIN_API_KEY" \
  https://agentfin.tech/api/inbox/latest-otp

Returns the most recent email with extracted OTP codes. The extractedCodes field is an array of strings. Use the first element as the verification code.

If a purchase triggers 3DS, wait 10-30 seconds for the OTP email to arrive, then call this endpoint.

Top Up Card Balance

curl -X POST -H "Authorization: Bearer $AGENTFIN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"amount": 50, "currency": "USD"}' \
  https://agentfin.tech/api/cards/{cardId}/topup

Moves funds from your account balance to the card. The card is prepaid — you cannot spend more than the loaded amount.

View Transaction History

curl -H "Authorization: Bearer $AGENTFIN_API_KEY" \
  https://agentfin.tech/api/me/transactions

Returns all deposits, card charges, top-ups, and refunds.

Typical Purchase Flow

  1. Check balance with GET /api/me — ensure sufficient funds
  2. Get card credentials with GET /api/cards/{cardId}/sensitive
  3. Use PAN, CVV, expiry to fill in payment form on merchant site
  4. If 3DS is triggered, wait ~15 seconds then GET /api/inbox/latest-otp
  5. Submit the OTP code from extractedCodes[0]
  6. Purchase complete

Important Notes

  • The card is prepaid. You cannot spend more than the loaded balance.
  • Card credentials are rate-limited (10/min). Cache them for the duration of a purchase session.
  • OTP codes arrive via email to a dedicated inbox. There may be a 10-30 second delay.
  • Fund the account by sending USDT (TRC20) to the deposit address from GET /api/me.
安全使用建议
This skill is internally coherent for controlling a third-party virtual-card service, but it performs very sensitive actions (revealing PAN/CVV, fetching OTPs, moving funds). Before installing: verify the vendor (agentfin.tech) and publisher reputation; only provide an API key with the minimum privileges and rotate it frequently; never store or log PAN/CVV/OTP values in plaintext; enable monitoring/alerts for API key use and unexpected charges; confirm you have legal/contractual right to issue and use cards via this service; consider using an ephemeral or limited-scope key for testing; and treat the skill as high-risk if you cannot validate the provider or its regulatory compliance.
功能分析
Type: OpenClaw Skill Name: agentfin Version: 1.0.0 The skill is classified as suspicious due to its inherent high-risk capabilities, specifically the handling and retrieval of highly sensitive financial data including PAN, CVV, expiry dates, and OTP codes, as described in SKILL.md. While these actions are aligned with the stated purpose of facilitating virtual card transactions, the nature of accessing such critical credentials presents a significant security risk if the agent or its instructions were compromised. There is no evidence of explicit malicious intent, unauthorized data exfiltration to external endpoints beyond agentfin.tech, or system-level compromise instructions within the provided files.
能力评估
Purpose & Capability
Name/description (virtual cards, balance, credentials, OTP) matches the single required credential (AGENTFIN_API_KEY) and the API endpoints described in SKILL.md. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md is instruction-only and limits actions to calling the AgentFin REST API (balance, card sensitive endpoint, inbox/latest-otp, topup, transactions). It does not instruct reading other files, environment variables, or transmitting data to third parties beyond the documented base URL.
Install Mechanism
No install spec and no code files — instruction-only skill (lowest install risk). Nothing is downloaded or written to disk by the skill itself.
Credentials
Only AGENTFIN_API_KEY is required and declared as the primary credential, which is proportionate for an API-based payment/card service.
Persistence & Privilege
Skill is not force-included (always:false) and does not request persistent system privileges or modification of other skills. Autonomous invocation is allowed by default but not excessive here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install agentfin
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /agentfin 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — virtual Visa/MC cards for AI agents, funded by USDT
元数据
Slug agentfin
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

AgentFin 是什么?

Issue virtual Visa/MC cards funded by USDT. Check balance, get card credentials, fetch OTP codes — all via REST API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 409 次。

如何安装 AgentFin?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install agentfin」即可一键安装,无需额外配置。

AgentFin 是免费的吗?

是的,AgentFin 完全免费(开源免费),可自由下载、安装和使用。

AgentFin 支持哪些平台?

AgentFin 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 AgentFin?

由 elvismusli(@elvismusli)开发并维护,当前版本 v1.0.0。

💬 留言讨论