Shopify Checkout API

Complete online shopping purchases on any online store using the Credpay Checkout API with x402 payments. Trigger when a user wants to buy, order, or checkou...

Exercise caution before enabling this skill. Ask the publisher/developer to clarify: (1) why the skill is named "Shopify" while using Credpay and whether it truly supports arbitrary stores; (2) exactly how the X-PAYMENT (x402) payload is generated—what credentials or wallet access are required and how they should be provided and stored; (3) the privacy/security practices of checkout-agent.credpay.xyz (privacy policy, data retention, who can access submitted PII). Do not submit real payment credentials, full personal data, or large-value purchases until you: verify the service's identity and reputation, obtain explicit documentation for required credentials, and ensure keys are stored securely (not pasted into chat). Consider requiring explicit, one-time user consent before sending any PII or payment payloads and restrict autonomous invocation until these questions are answered.

Type: OpenClaw Skill Name: shopify-checkout Version: 1.0.0 The skill is classified as suspicious due to its inherent high-risk capabilities, specifically the collection and transmission of sensitive Personally Identifiable Information (PII) and the initiation of cryptocurrency financial transactions (x402 payments) via an external API (checkout-agent.credpay.xyz). While these actions align with the stated purpose of an online checkout skill, the direct handling of user funds and personal data, coupled with reliance on an external third-party service, represents a significant risk profile. There is no evidence of intentional malicious prompt injection or other harmful behaviors within SKILL.md, but the nature of the operations warrants a 'suspicious' classification rather than 'benign' due to the potential impact of compromise or misuse.