← 返回 Skills 市场
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.
83
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install x402-card
功能描述
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set...
安全使用建议
This skill appears to do what it says (create virtual cards by signing payments), but exercise caution before using it with a wallet that holds real funds. Specific recommendations:
- Use a dedicated, low-value wallet for card purchases — do not use your main wallets.
- Prefer setting the private key in a local config file with strict permissions or an environment variable rather than passing it as a CLI flag (flags can be stored in shell history or visible in process lists).
- Review the npm package @aeon-ai-pay/x402-card and its GitHub repo (verify publisher, recent commits, and package integrity) before running npx commands. The skill's auto-upgrade runs npx upgrade and can fetch/execute new code without further prompts — consider disabling or scrutinizing upgrades.
- If possible, use a signing device or hardware wallet flow rather than embedding raw private keys in files/flags.
- Don’t store large balances in the wallet used with this skill; test with small amounts first. If you want, provide the package source or the npm package link so a further code-level review can reduce uncertainty.
功能分析
Type: OpenClaw Skill
Name: x402-card
Version: 1.0.0
The skill manages sensitive EVM private keys and executes remote code via 'npx @aeon-ai-pay/x402-card', which presents a high risk of credential theft if the remote package is compromised. It explicitly instructs the AI agent to solicit the user's private key and store it in a local configuration file (~/.x402-card/config.json), while also mandating background 'auto-upgrades' via the same npx package. While these actions are consistent with the stated goal of facilitating crypto-based virtual card purchases, the combination of handling raw secrets and executing unpinned remote code is a significant security risk.
能力评估
Purpose & Capability
The skill is for buying virtual cards via an x402 HTTP/blockchain flow and needs an EVM private key and Node/npx to sign payments and run the published CLI. Requesting EVM_PRIVATE_KEY and node/npx is consistent with the stated purpose.
Instruction Scope
Runtime instructions direct the agent to run npx @aeon-ai-pay/x402-card commands (setup, create, status) and to store the private key in ~/.x402-card/config.json. They also instruct an automatic background 'upgrade --check' that may trigger an 'upgrade' run. The background auto-upgrade and the explicit suggestion to pass private keys on CLI flags (which can leak to shell history or process listings) expand the risk surface beyond just local signing and status checks.
Install Mechanism
There is no bundled code; the skill repeatedly instructs running npx which downloads and executes code from the npm registry at runtime. That is a normal pattern for CLI tools but it means arbitrary code can be fetched/ran (especially via the auto-upgrade path) — a higher-risk install mechanism compared with instruction-only local actions.
Credentials
Only EVM_PRIVATE_KEY is declared as the primary credential, which is proportionate to signing payments. However, handling private keys via CLI flags, env vars, and a local config file increases exposure; the SKILL.md's assurances (masked display, stored with 600 perms) are helpful but do not eliminate risk of accidental leakage or exfiltration if the remotely fetched CLI is malicious or compromised.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. The notable behavior is running a one-per-session background auto-upgrade check which can autonomously fetch/execute code; this increases runtime privilege but is limited to the skill's own CLI workflow.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install x402-card - 安装完成后，直接呼叫该 Skill 的名称或使用
/x402-card触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
x402-card v1.0.0 – Initial Release
- Enables users to purchase virtual Visa/Mastercard debit cards using USDT on BSC via the x402 protocol.
- Supports card creation, status checking, wallet setup, and protocol information through a unified CLI tool.
- Ensures secure wallet configuration, amount confirmation, and safe handling of private keys.
- Enforces pre-flight checks, amount limits from backend, and explicit user confirmation before card purchase.
- Provides clear guidance for insufficient USDT balance and secure configuration management.
元数据
常见问题
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. 是什么？
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 83 次。
如何安装 Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install x402-card」即可一键安装，无需额外配置。
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. 是免费的吗？
是的，Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. 支持哪些平台？
Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency. 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Use this skill when the user wants to purchase a virtual debit card using crypto, create a prepaid card via x402 protocol, check virtual card status, or set up an EVM wallet for card payments. Trigger on: "buy a card", "get a virtual card", "create card", "card status", "setup wallet for card", or any intent involving purchasing virtual Visa/Mastercard with cryptocurrency.？
由 yuanyongm（@yuanyongm）开发并维护，当前版本 v1.0.0。
推荐 Skills