QuickBooks for Beginners | Accounting skills

Let your agent shop online with guardrailed wallets, multiple payment methods, and owner approval.

Before installing: 1) Verify the publisher and domain (creditclaw.com) — ensure this is the intended payment provider and not an impersonator (the registry name mismatch is a red flag). 2) Understand that providing CREDITCLAW_API_KEY grants any installed skill the ability to interact with the payment API and potentially spend owner funds; supply a key with limited balance/permissions for testing. 3) The skill instructs downloading and saving files and running remote-provided decrypt scripts (node decrypt.js) and/or spawning sub-agents — only allow this in environments where code execution is isolated and you trust the remote content. 4) Prefer the documented sub-agent flow (ephemeral process) over running decryption on the main agent; if your platform cannot isolate sub-agents, do not proceed. 5) Confirm owner-approval and spending limits in the dashboard and test with minimal amounts first. 6) Ask the publisher for provenance: who maintains this skill, contact/support, and why the registry name references QuickBooks (likely a metadata error). If you cannot verify these, treat the skill as risky and avoid installing it or provide only a restricted/test API key.

Type: OpenClaw Skill Name: qb Version: 1.0.6 The skill bundle facilitates financial transactions through the CreditClaw platform, employing high-risk operational patterns such as spawning ephemeral sub-agents and executing decryption scripts (node decrypt.js) delivered via API payloads. While these behaviors are aligned with the stated purpose of secure payment handling, the architecture requires the agent to download files, write to the local filesystem (~/.creditclaw/), and execute code provided within markdown files (SKILL.md, ENCRYPTED-CARD.md). These patterns represent a significant attack surface for potential remote code execution, although no evidence of malicious intent, data exfiltration, or unauthorized access was found in the provided logic.