← 返回 Skills 市场
Sardis — Payment OS for AI Agents
作者
EfeDurmaz16
· GitHub ↗
· v1.1.0
· MIT-0
145
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install sardis
功能描述
Payment OS for AI agents. Create MPC wallets, execute stablecoin payments with automatic policy enforcement, set spending rules in natural language, check ba...
安全使用建议
This package appears to be what it says: a Sardis payment integration that needs a Sardis API key. Before installing: (1) Verify the upstream packages (pip 'sardis' and the GitHub repo) to ensure you're comfortable with third-party code; (2) Confirm what permissions the SARDIS_API_KEY grants in your Sardis account (limit it to test wallets or read-only if possible); (3) Prefer using the read-only subskill (sardis-balance) when exploring; (4) Resolve the header inconsistency (X-API-Key vs Authorization: Bearer) in your deployment to avoid accidental credential leakage; (5) If you allow autonomous agent invocation, require human approval or per-transaction confirmation for any real-money payments and enable the guardrails/kill-switch features; (6) Rotate keys after testing and monitor payment logs/alerts closely.
功能分析
Type: OpenClaw Skill
Name: sardis
Version: 1.1.0
The 'sardis' skill bundle is a legitimate payment infrastructure for AI agents, providing tools for wallet creation, stablecoin payments, and natural language spending policies via the Sardis API (api.sardis.sh). The implementation is transparent, using standard Python libraries like httpx and FastAPI, and the documentation includes strong security guardrails (e.g., 'FAIL CLOSED' on policy violations). No indicators of data exfiltration, malicious execution, or prompt injection attacks were identified.
能力评估
Purpose & Capability
Name/description (payment OS, wallets, policies, cards) align with the requested env var (SARDIS_API_KEY), required binary (curl), packaged code, and API endpoints. The package includes many payment-related subskills and a FastAPI-based local skill server consistent with the stated purpose.
Instruction Scope
SKILL.md contains straightforward curl-based instructions for wallet creation, payments, policy checks, etc., which stay within the payment domain. Notable issues: (1) inconsistent header examples (some examples use X-API-Key, others use Authorization: Bearer) which could cause confusion or incorrect usage; (2) examples show running a local FastAPI skill server and passing 'api_key' inside the request context — be careful not to log or expose keys when using the server. The instructions do not ask the agent to read unrelated local files or system credentials.
Install Mechanism
Install uses the 'uv' package kind (sardis-openclaw) and subskill SKILL.md examples reference installing @sardis/sdk via npm. There are no ad-hoc downloads from unknown URLs in the manifest. Installing npm packages or the upstream 'sardis' dependency introduces normal third-party package risk; this is expected for an SDK but should be reviewed. The install footprint and archive-extraction risk appear moderate and proportional to the skill's purpose.
Credentials
Primary credential is SARDIS_API_KEY which is appropriate for a payment integration. A few subskills (e.g., tempo-pay) mention additional env vars like SARDIS_WALLET_ID and SARDIS_TEMPO_RPC_URL — these are plausible for specialized features but mean additional secrets/config may be required for some functionality. No unrelated cloud or system credentials are requested.
Persistence & Privilege
always is false and the skill does not request system-wide config changes or other skills' credentials. The skill can be invoked autonomously (default) — normal for skills — but because it can execute real payments, you should consider restricting autonomous payment execution or requiring human approval when deploying.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install sardis - 安装完成后,直接呼叫该 Skill 的名称或使用
/sardis触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
v1.1.0: Real API endpoints (X-API-Key auth, /api/v2/ paths), virtual cards, spending mandates, auto-routing
元数据
常见问题
Sardis — Payment OS for AI Agents 是什么?
Payment OS for AI agents. Create MPC wallets, execute stablecoin payments with automatic policy enforcement, set spending rules in natural language, check ba... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 145 次。
如何安装 Sardis — Payment OS for AI Agents?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sardis」即可一键安装,无需额外配置。
Sardis — Payment OS for AI Agents 是免费的吗?
是的,Sardis — Payment OS for AI Agents 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Sardis — Payment OS for AI Agents 支持哪些平台?
Sardis — Payment OS for AI Agents 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Sardis — Payment OS for AI Agents?
由 EfeDurmaz16(@efedurmaz16)开发并维护,当前版本 v1.1.0。
推荐 Skills