Sardis Openclaw

Enable AI agents to make secure, policy-controlled payments through Sardis Payment OS

This appears to be a legitimate Sardis payment integration, but several red flags mean you should be careful before installing or letting it run autonomously: 1) Packaging/installer mismatch — the bundle includes Python source and a pyproject.toml but the SKILL.md suggests an npm SDK; clarify which runtime and installer are actually required. 2) Code present — although the SKILL.md shows only curl examples, the included Python code could read ~/.sardis/config.json or other local files; inspect the code (src/) to confirm what it accesses before trusting it. 3) Binaries mismatch — some subskills use jq in examples but the top-level metadata does not declare jq as required; ensure you have the listed tools and understand expected behavior. 4) Autonomous invocation + payments = real money risk — only enable model/autonomous invocation if the API key is scoped/revocable, limits are enforced server-side, policy enforcement is robust, and there is an approval/notification workflow. Recommended steps: review the Python source files to confirm they only call api.sardis.sh and don't phone home elsewhere; verify the GitHub repository and upstream package (sardis SDK) are the official project; use a restricted, revocable API key in a sandbox wallet for initial testing; and require manual approval or strong server-side policy checks before allowing live transactions.

Type: OpenClaw Skill Name: sardis-openclaw Version: 1.0.0 The sardis-openclaw bundle provides a comprehensive suite of skills for AI agents to interact with the Sardis Payment OS. The package includes well-structured Python code (src/sardis_openclaw) and extensive documentation (SKILL.md files) for managing crypto payments, virtual cards, spending policies, and agent identities. The implementation uses standard libraries like httpx and FastAPI to interact with the official Sardis API (api.sardis.sh). The documentation includes strong defensive instructions for the AI agent, such as 'FAIL CLOSED on policy violations' and 'NEVER bypass approval flows.' No indicators of malicious intent, data exfiltration, or unauthorized execution were found.