Privacy Cards

Create and manage Privacy.com virtual cards. Use for generating single-use cards, merchant-locked cards, listing cards, setting spending limits, pausing/closing cards, and viewing transactions via the Privacy.com API.

This skill's instructions legitimately use Privacy.com APIs, but the package metadata omits the required PRIVACY_API_KEY — that's an internal inconsistency you should question before installing. Do not provide a production API key unless you trust the skill owner. Prefer testing with a sandbox key first, and only grant least-privilege credentials needed. Ask the publisher why the metadata doesn't declare the required env var and whether the skill stores or transmits your key anywhere beyond api.privacy.com. Monitor and rotate keys if you test or use this skill; avoid giving enterprise-level keys that return PAN/CVV unless absolutely necessary.

Type: OpenClaw Skill Name: privacy-cards Version: 1.0.0 The skill bundle is benign. It provides instructions and examples for interacting with the Privacy.com API to manage virtual cards. All network requests are directed to legitimate Privacy.com domains (api.privacy.com, sandbox.privacy.com), and the API key is handled securely via an environment variable. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's intended function or perform unauthorized actions. The `references/api.md` file contains only documentation and a benign Python example for webhook verification.