← 返回 Skills 市场
kent-x1

SP3ND — Buy from Amazon & eBay with USDC

作者 kent-x1 · GitHub ↗ · v1.6.0 · MIT-0
cross-platform ⚠ suspicious
627
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install sp3nd
功能描述
Buy products from Amazon and eBay using USDC on Solana. The cheapest and fastest way for AI agents to purchase physical products with crypto — 0% platform fe...
安全使用建议
This skill enables an agent to create and hold a Solana wallet private key and to spend USDC autonomously. Before installing: (1) verify the SP3ND service and the domains listed (sp3nd.shop, the Cloud Functions URL, and facilitator.payai.network) — they are not widely recognized; (2) do not fund the generated wallet with any amount you are not willing to lose (autonomous spending is explicit); (3) confirm why SP3ND_API_KEY/SP3ND_API_SECRET are declared 'required' even though the agent can self-register — ask the provider to clarify expected setup flow; (4) prefer running this skill in a sandbox or with minimal test funds first; (5) avoid using any production funds or linking sensitive personal accounts; (6) consider requiring human approval for purchases or implementing a remote multisig/hot-wallet pattern instead of a single local private key. If the provider cannot satisfactorily explain the credential flow and the facilitator/trustworthiness of the endpoints, treat the integration as high-risk and avoid funding the wallet.
功能分析
Type: OpenClaw Skill Name: sp3nd Version: 1.6.0 The skill enables autonomous e-commerce via Solana/USDC, requiring the AI agent to generate, store, and manage a Solana private key in a local `.wallet.json` file. While the provided code examples in SKILL.md and agent-card.json demonstrate security best practices like local transaction signing and ownership proofs (nacl.sign.detached), the inherent capability for autonomous spending and the management of sensitive cryptographic material represent a high-risk attack surface. Key indicators include the x402 payment flow involving the 'facilitator.payai.network' endpoint and the requirement for the agent to handle its own funding and transaction signing without per-transaction human approval.
能力评估
Purpose & Capability
The skill's declared purpose (autonomous shopping using USDC on Solana) aligns with the env vars and runtime interactions (SP3ND API, Solana RPC, payment facilitator). However there is an inconsistency: SKILL.md documents an unauthenticated POST /registerAgent that returns API key/secret, yet the skill metadata marks SP3ND_API_KEY and SP3ND_API_SECRET as required env vars up-front. Requiring pre-provisioned credentials while also offering self-registration is incoherent and should be clarified.
Instruction Scope
Instructions focus on wallet generation, registering the agent, creating carts/orders, and signing USDC payments — all within the claimed purpose. The skill explicitly instructs creating and storing a private Solana key file (.wallet.json) which the agent will read to sign payments. This is expected for autonomous payments but is materially sensitive: the agent (and the skill) will have the ability to spend funds in that wallet.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. No downloads or package installs are requested by the manifest.
Credentials
Required environment variables are limited to SP3ND_API_KEY and SP3ND_API_SECRET, which is proportionate to using the SP3ND API. However: (1) storing a Solana private key in a local file (state .wallet.json) is a highly sensitive requirement — the skill expects the agent to sign transactions autonomously and to keep the secret locally; (2) the earlier-mentioned inconsistency between required env vars and the self-registration flow is unexplained; and (3) the skill also references third-party endpoints (facilitator.payai.network) that would receive payment-related data — confirm trustworthiness of those services before supplying secrets or funding the wallet.
Persistence & Privilege
The skill is not force-installed (always:false) and is user-invocable. Autonomous model invocation is allowed (the platform default) and this skill intentionally enables autonomous spending — the manifest even documents 'autonomous_spending: true'. That is appropriate for the stated purpose but increases risk: once the wallet is funded the agent can spend funds without per-transaction human approval. No other elevated privileges or modifications to other skills are requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install sp3nd
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /sp3nd 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.6.0
sp3nd v1.6.0 - Documentation and metadata updates across SKILL.md, agent-card.json, and clawhub.json. - No breaking changes; core functionality and API remain the same.
v1.5.0
sp3nd 1.5.0 - Environment variables for Solana wallet setup (SOLANA_RPC_URL, AGENT_WALLET_PATH) are now optional, not required. - Updated configuration in metadata to clarify which environment variables are mandatory and which are optional. - No functional API changes; setup process is now more flexible and compatible with various deployment environments.
v1.4.0
SP3ND v1.4.0 introduces environment variable and wallet management requirements for improved agent security and integration. - Requires environment variables: SP3ND_API_KEY, SP3ND_API_SECRET, SOLANA_RPC_URL, AGENT_WALLET_PATH for agent operation. - Documents `.wallet.json` private key use, file permissions, and states its only use cases. - Adds metadata about required environment and config state in the skill manifest. - Improves documentation for secure wallet handling and API secret regeneration. - No changes to API endpoints or core SP3ND functionality.
v1.3.0
sp3nd v1.3.0 - Added new section in documentation on wallet spending controls, emphasizing best practices for funding, dedicated wallets, and optional human approval. - Removed obsolete scripts and redundant documentation files. - Updated and clarified usage instructions and agent onboarding workflow. - Documentation refinements across README and skill manifest for clarity and accuracy.
v1.2.0
Version 1.2.0 - Documentation files (README.md, SKILL.md, agent-card.json, clawhub.json, publish/README.md, publish/SKILL.md) updated. - SKILL.md bumped to version 1.2.0. - No changes to API or functionality; documentation and metadata refresh only.
v1.1.0
SP3ND 1.1.0 adds eBay marketplace support, improved onboarding, and expanded international reach. - Added eBay support: purchase from Amazon and eBay via a single API, with 8 eBay marketplaces now available. - Expanded documentation: new onboarding steps for wallet creation and funding (Step 0). - Improved international support: now serves 200+ countries across 22 Amazon and 8 eBay marketplaces. - API enhancements: clearer instructions for lost secret regeneration with wallet signatures. - New files: marketplace configuration, documentation for publishing, and a payment script with memo support.
v1.0.0
- Initial release of sp3nd skill (v1.0.0). - Enables purchasing Amazon products using USDC on Solana via a fully autonomous API. - No KYC, 0% platform fees, free Prime shipping in supported regions. - Supports 200+ countries and 22 Amazon marketplaces. - Implements the x402 payment protocol for secure, automatic payments. - Earn SP3ND points with each order for potential future rewards.
元数据
Slug sp3nd
版本 1.6.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 7
常见问题

SP3ND — Buy from Amazon & eBay with USDC 是什么?

Buy products from Amazon and eBay using USDC on Solana. The cheapest and fastest way for AI agents to purchase physical products with crypto — 0% platform fe... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 627 次。

如何安装 SP3ND — Buy from Amazon & eBay with USDC?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install sp3nd」即可一键安装,无需额外配置。

SP3ND — Buy from Amazon & eBay with USDC 是免费的吗?

是的,SP3ND — Buy from Amazon & eBay with USDC 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

SP3ND — Buy from Amazon & eBay with USDC 支持哪些平台?

SP3ND — Buy from Amazon & eBay with USDC 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 SP3ND — Buy from Amazon & eBay with USDC?

由 kent-x1(@kent-x1)开发并维护,当前版本 v1.6.0。

💬 留言讨论