MetaMask Payments -

MetaMask Wallet - Give your agent spending power. Financial management for Agents and OpenClaw bots.

Key things to check before installing: 1) Confirm the skill's provenance — the manifest points to creditclaw.com but the skill name says MetaMask; verify you trust creditclaw.com and the publisher. 2) Treat CREDITCLAW_API_KEY like money — create a minimally privileged/test API key or sandbox account first and never paste the key into untrusted prompts. 3) Verify owner-side guardrails: set approval_mode to 'ask_for_everything' and low per-transaction/daily limits while you test. 4) If you must allow automated use, restrict which domains and merchants are allowed in the owner's dashboard and monitor webhook logs and notifications. 5) Test with minimal/sandbox funds and confirm webhooks/callback URLs are correct. 6) If the name/branding mismatch (MetaMask vs CreditClaw) can't be explained by the publisher, treat this as suspicious and prefer not to install until you can verify the publisher and rationale.

Type: OpenClaw Skill Name: metamask Version: 1.0.0 The metamask/creditclaw skill bundle provides a comprehensive financial management framework for AI agents, allowing them to handle payments, checkouts, and wallet balances via the creditclaw.com API. While the skill handles sensitive operations—including a 'My Card' flow (encrypted-card.md) where the agent decrypts card details in memory for transactions—it includes extensive security documentation, server-side guardrails, and explicit instructions for the agent to protect API keys and discard sensitive data. No evidence of malicious intent, unauthorized data exfiltration, or prompt injection attacks was found; the high-risk capabilities are transparently documented and aligned with the stated purpose of financial enablement.