← 返回 Skills 市场
91
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install privacy-cli
功能描述
Use the Privacy CLI to create and manage Privacy Virtual Cards directly from the terminal. Trigger this skill whenever the user asks to create, list, pause,...
安全使用建议
Before installing or enabling this skill: 1) Note the mismatch — SKILL.md requires PRIVACY_API_KEY, npm/node, and the privacy CLI, but the registry metadata does not declare these. Ask the publisher to correct metadata so you (and the platform) can make an informed permission decision. 2) Treat PRIVACY_API_KEY as highly sensitive: only set it in environments you control, and avoid exposing it to agents you don't trust. 3) The skill may cause you (or the agent) to install a global npm package — installing from npm runs third-party code, so prefer installing manually and verifying the package (@privacy-com/privacy-cli) is the official one. 4) The skill can retrieve full PAN data; follow the SKILL.md guidance: require explicit user confirmation and never persist PANs to disk or logs. 5) If you want to limit risk, restrict the agent's ability to invoke this skill autonomously (or require manual approval) and verify that the agent/platform will not expose ~/.privacy/config or other credentials without your consent. 6) If you need higher assurance, ask the maintainer for an install spec and for registry metadata to accurately list required env vars and binaries.
功能分析
Type: OpenClaw Skill
Name: privacy-cli
Version: 1.0.2
The privacy-cli skill provides a legitimate interface for managing Privacy.com virtual cards and viewing transaction history via the official CLI. It includes proactive security instructions for the agent, such as requiring explicit user confirmation before retrieving sensitive PAN data and advising against storing such information. The installation steps and authentication methods (using the @privacy-com/privacy-cli npm package and PRIVACY_API_KEY environment variable) are standard for this type of utility and align with the stated purpose in SKILL.md.
能力评估
Purpose & Capability
The skill's purpose (manage Privacy virtual cards) legitimately requires an API key and the official privacy CLI. The SKILL.md explicitly requires PRIVACY_API_KEY, npm/node, and the @privacy-com/privacy-cli package, but the registry metadata lists no required env vars or binaries — an inconsistency between declared metadata and the runtime instructions.
Instruction Scope
The instructions stay within the stated purpose (create/list/pause/close cards, list transactions). They correctly warn about handling PAN data and require explicit user confirmation for full PAN retrieval. The SKILL.md also notes the CLI resolves the API key from either PRIVACY_API_KEY or ~/.privacy/config — meaning the agent may indirectly access the user's credential file if the CLI reads it. The instructions do not ask to read unrelated system files, but they do rely on a user-managed secret and a config file.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md tells the agent to run `npm install -g @privacy-com/privacy-cli` if the CLI is missing. Installing a global npm package is a reasonable way to obtain the CLI, but it involves running third-party code from the npm registry — this is moderate risk and should be done deliberately. The install step is not reflected in registry install metadata.
Credentials
Access to PRIVACY_API_KEY (and the CLI's ~/.privacy/config) is directly required for the skill's functionality, so the secret itself is proportionate. However, the registry metadata does not declare the PRIVACY_API_KEY or required binaries — the omission makes it unclear to users and platform permission systems what secrets/binaries the skill will use. The skill also allows retrieval of very sensitive PAN data (appropriately gated by a confirmed user prompt).
Persistence & Privilege
The skill is not forced-always, does not request persistent system-wide privileges, and does not modify other skills. Autonomous model invocation is enabled (the platform default) but not combined with other high-risk flags.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install privacy-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/privacy-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Added a metadata section specifying required environment variables and binaries for the skill.
- Updated security guidelines: now requires explicit user confirmation before revealing full card details (PAN, CVV, Expiry).
- No command or feature changes.
v1.0.1
- Added explicit compatibility section, specifying the required PRIVACY_API_KEY environment variable and npm package.
- Updated authentication instructions to recommend only the PRIVACY_API_KEY environment variable, removing interactive prompts.
- Clarified that interactive mode should never be used or suggested.
- Other minor wording improvements for clarity.
v1.0.0
Initial release of privacy-cli skill for managing Privacy Virtual Cards via terminal:
- Create, list, update, pause, unpause, and close virtual cards using secured CLI commands.
- View card details and fetch full card information (PAN, CVV, Expiry) with security warnings.
- List and filter transaction history by date, card, or approval status.
- Simple setup instructions included for CLI installation and authentication.
- All commands output machine-readable JSON for easy parsing.
元数据
常见问题
Privacy virtual credit cards 是什么？
Use the Privacy CLI to create and manage Privacy Virtual Cards directly from the terminal. Trigger this skill whenever the user asks to create, list, pause,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 91 次。
如何安装 Privacy virtual credit cards？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install privacy-cli」即可一键安装，无需额外配置。
Privacy virtual credit cards 是免费的吗？
是的，Privacy virtual credit cards 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Privacy virtual credit cards 支持哪些平台？
Privacy virtual credit cards 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Privacy virtual credit cards？
由 eladrave（@eladrave）开发并维护，当前版本 v1.0.2。
推荐 Skills