Scout Commerce

Search for products on Amazon/shopify and buy with USDC on Solana. Swap tokens using Jupiter.

This skill appears to do what it claims, but take these precautions before installing or using it: - Verify the API endpoint (https://scout-api.trustra.xyz) is the trusted service you intend to use. If you don't trust that server, do not register or fund the wallet. - The get_api_key flow registers you and stores an API key + wallet_address in credentials.json; keep that file private (restrict filesystem permissions) or set SCOUT_API_KEY as an environment variable instead. - Do not fund the returned wallet address with significant funds until you've audited the service and tested small amounts. - Installing requirements.txt will pull packages from PyPI (x402, solana, solders). Prefer running inside an isolated virtual environment or disposable VM/container. - Review the code yourself (or have someone you trust do so) if you plan to use it for real purchases: network calls go to scout-api.trustra.xyz, Solana RPC (api.mainnet-beta.solana.com), and Jupiter tokens metadata (tokens.jup.ag) which is expected but worth confirming. - If you want tighter control, avoid saving credentials.json and pass SCOUT_API_KEY via the environment when invoking scripts.

Type: OpenClaw Skill Name: scout-commerce Version: 1.1.0 The OpenClaw AgentSkills skill bundle is designed for e-commerce and crypto token swaps on Solana. All network requests are directed to legitimate endpoints (`scout-api.trustra.xyz`, `api.mainnet-beta.solana.com`, `tokens.jup.ag`) consistent with its stated purpose. The `SKILL.md` instructions guide the AI agent on how to present information and use the tools, without any evidence of prompt injection aiming for malicious actions. The Python scripts manage an API key and wallet address in `credentials.json`, which is necessary for its functionality, and do not access unrelated sensitive data or perform unauthorized operations.