← 返回 Skills 市场
Shop from Nvidia - With your claw and creditcard
作者
TripleHippo
· GitHub ↗
· v1.0.0
· MIT-0
237
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install nvidia
功能描述
Buy at Nvidia | Manage compatible cards, wallets & payments. Financial management for Agents and OpenClaw bots.
安全使用建议
This skill appears internally consistent for giving an agent controlled spending ability via CreditClaw. Before installing, consider: 1) Confirm the name/branding mismatch — the manifest and docs reference creditclaw.com; verify you intended to install CreditClaw and not an Nvidia-specific integration. 2) Treat CREDITCLAW_API_KEY as a sensitive secret: provide a dedicated, limited-scope API key for bots (rotate/revoke if needed) and never share it with other services. 3) The agent will be instructed to decrypt owner card details in memory for checkouts — ensure your agent runtime does not log or transmit memory contents and that decrypted card data cannot be persisted or exfiltrated. 4) Keep approval_mode conservative (e.g., ask_for_everything) until you trust automated behavior; prefer manual approvals for purchases. 5) Verify creditclaw.com (TLS certificate, reputation) and webhook callback URLs in your environment. 6) Monitor the bot's transaction logs and webhook notifications and be ready to freeze the wallet or revoke the API key if you see unexpected activity. If you see additional required env vars, an install script that downloads code, or explicit instructions to send the API key to domains other than creditclaw.com, treat the skill as suspicious and do not proceed.
功能分析
Type: OpenClaw Skill
Name: nvidia
Version: 1.0.0
The skill bundle provides a comprehensive financial management framework for AI agents via the CreditClaw platform, enabling both spending (via encrypted cards and x402/USDC wallets) and payment collection. The instructions in SKILL.md and ENCRYPTED-CARD.md are highly security-conscious, emphasizing the use of secure secrets managers, ephemeral in-memory decryption of card data, and server-side enforcement of spending guardrails. While the 'nvidia' slug in _meta.json and SKILL.md suggests a specific use case, the underlying logic is consistent with a legitimate financial enablement service, and the bundle includes explicit warnings to the agent against sharing credentials or exfiltrating data.
能力评估
Purpose & Capability
The description and API docs consistently describe a payment/wallet platform (CreditClaw) for agent spending, encrypted-card checkout, and x402/USDC signing. The single required environment variable (CREDITCLAW_API_KEY) is appropriate for that purpose. Minor inconsistency: the skill name/title references 'Nvidia' specifically, but nothing in the files requires Nvidia-specific credentials or endpoints; the content is generic CreditClaw functionality. This could be a labeling/packaging issue rather than malicious intent.
Instruction Scope
SKILL.md and companion documents instruct the agent to call only creditclaw.com API endpoints and to read the provided companion files. There are explicit, repeated warnings about keeping the API key private and not persisting decrypted card data. The only high-sensitivity runtime action the instructions require is performing AES-256-GCM decryption of owner-supplied card details in memory for a single checkout — this is coherent with the stated purpose (making purchases) but increases the risk surface if the agent or environment logs or leaks memory.
Install Mechanism
Instruction-only skill with no install spec and no code files to execute locally. This minimizes risk from arbitrary third-party downloads or on-disk executables.
Credentials
The skill requires a single credential (CREDITCLAW_API_KEY), declared as the primary credential and used for Authorization headers in all API calls — proportionate for a payment service integration. No unrelated secrets, system paths, or additional environment variables are requested.
Persistence & Privilege
The skill does not request permanent presence (always is false) and does not include scripts that modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with other elevated privileges.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install nvidia - 安装完成后,直接呼叫该 Skill 的名称或使用
/nvidia触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
nvidia skill v2.3.4 – Major update and rebranding for agent financial management
- Now powered by CreditClaw: Securely manage payments, compatible cards, wallets, and accounting for Agents and OpenClaw bots.
- Added multi-rail payments: Supports owner's card checkout, Stripe x402 (USDC/Stablecoin wallet), and Crossmint (coming soon).
- Enhanced owner guardrails: Per-transaction, daily, monthly limits, category blocks, and mandatory owner approvals by default.
- Streamlined onboarding: Fast registration with automated approval flows and webhook support.
- Expanded API documentation and file structure available directly via public URLs—no local installation needed.
- Improved security: Defense-in-depth including hashed API keys, rate limiting, ephemeral sessions, and rigorous access controls.
元数据
常见问题
Shop from Nvidia - With your claw and creditcard 是什么?
Buy at Nvidia | Manage compatible cards, wallets & payments. Financial management for Agents and OpenClaw bots. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 237 次。
如何安装 Shop from Nvidia - With your claw and creditcard?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nvidia」即可一键安装,无需额外配置。
Shop from Nvidia - With your claw and creditcard 是免费的吗?
是的,Shop from Nvidia - With your claw and creditcard 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Shop from Nvidia - With your claw and creditcard 支持哪些平台?
Shop from Nvidia - With your claw and creditcard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Shop from Nvidia - With your claw and creditcard?
由 TripleHippo(@triplehippo)开发并维护,当前版本 v1.0.0。
推荐 Skills