中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 0/100
Last scan:20 hr ago Rescan
0 /100
shopify-buy2 (creditclaw)
Financial enablement platform for AI agents - enables spending via credit card and crypto wallet
This is a pure documentation skill for a legitimate financial payment platform (CreditClaw) with no executable code, scripts, or malicious indicators.
Skill Nameshopify-buy2 (creditclaw)
Duration33.1s
Enginepi
✓
Safe to install
This skill is safe to use. All operations are documented REST API calls to creditclaw.com. No further action required.
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No file operations found - pure documentation
Network READ READ ✓ Aligned REST API calls to creditclaw.com only
Shell NONE NONE — No shell execution - documentation only
Environment READ READ ✓ Aligned CREDITCLAW_API_KEY read from env only
Skill Invoke NONE NONE — No skill invocation capability
Clipboard NONE NONE — No clipboard access
Browser NONE NONE — No browser automation - describes browser commands for OpenClaw CLI only
Database NONE NONE — No database operations
49 findings
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1
CHECKOUT-GUIDE.md:7
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/rail5/checkout
CHECKOUT-GUIDE.md:42
🔗
Medium External URL 外部 URL
https://cloud.digitalocean.com/billing
CHECKOUT-GUIDE.md:47
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/rail5/checkout/status?checkout_id=r5chk_abc123
CHECKOUT-GUIDE.md:90
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/rail5/key
CHECKOUT-GUIDE.md:108
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/rail5/confirm
CHECKOUT-GUIDE.md:208
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/messages
HEARTBEAT.md:18
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/messages/ack
HEARTBEAT.md:28
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/status
HEARTBEAT.md:39
🔗
Medium External URL 外部 URL
https://creditclaw.com/app.
HEARTBEAT.md:60
🔗
Medium External URL 外部 URL
https://creditclaw.com/overview.
HEARTBEAT.md:63
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/wallet/spending
HEARTBEAT.md:68
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/wallet/transactions?limit=10
MANAGEMENT.md:25
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/profile
MANAGEMENT.md:68
🔗
Medium External URL 外部 URL
https://my-gateway.com/hooks/creditclaw
MANAGEMENT.md:77
🔗
Medium External URL 外部 URL
https://new-endpoint.com/hooks/creditclaw
MANAGEMENT.md:95
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/checkout-pages/create
MY-STORE.md:28
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/checkout-pages
MY-STORE.md:74
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/sales
MY-STORE.md:85
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/invoices/create
MY-STORE.md:124
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/invoices
MY-STORE.md:177
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/invoices/[id
MY-STORE.md:215
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/payments/create-link
MY-STORE.md:242
🔗
Medium External URL 外部 URL
https://checkout.stripe.com/c/pay/cs_live_...
MY-STORE.md:256
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/payments/links
MY-STORE.md:279
🔗
Medium External URL 外部 URL
https://your-service.com/download/signed-token
MY-STORE.md:356
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/seller-profile
MY-STORE.md:383
🔗
Medium External URL 外部 URL
https://your-service.com/download/dataset-q1
MY-STORE.md:438
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/checkout-pages/:id
MY-STORE.md:460
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/shop
MY-STORE.md:482
🔗
Medium External URL 外部 URL
https://api.databot.com/keys/generate
MY-STORE.md:502
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/skills?search=MERCHANT_NAME
SHOPPING-GUIDE.md:27
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/skills
SHOPPING-GUIDE.md:166
🔗
Medium External URL 外部 URL
https://cloudserve.example.com
SHOPPING-GUIDE.md:188
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/skills/cloudserve-pro
SHOPPING-GUIDE.md:195
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/*
SKILL.md:69
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bots/register
SKILL.md:115
🔗
Medium External URL 外部 URL
https://creditclaw.com/claim?token=coral-X9K2
SKILL.md:140
🔗
Medium External URL 外部 URL
https://creditclaw.com/overview
SKILL.md:174
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/rail5/confirm-delivery
SKILL.md:335
🔗
Medium External URL 外部 URL
https://creditclaw.com/pay/test_...
SKILL.md:346
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/check/rail5
SKILL.md:386
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/stripe-wallet/bot/sign
STRIPE-X402-WALLET.md:40
🔗
Medium External URL 外部 URL
https://api.example.com/v1/data
STRIPE-X402-WALLET.md:44
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/stripe-wallet/balance?wallet_id=1
STRIPE-X402-WALLET.md:121
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/stripe-wallet/transactions?wallet_id=1&limit=10
STRIPE-X402-WALLET.md:141
🔗
Medium External URL 外部 URL
https://creditclaw.com/api/v1/bot/check/rail1
STRIPE-X402-WALLET.md:159
🔗
Medium External URL 外部 URL
https://creditclaw.com
_meta.json:4
📧
Info Email 邮箱地址
[email protected]
MY-STORE.md:130

File Tree

28 files · 128.8 KB · 3824 lines
Markdown 18f · 3619L JSON 10f · 205L
├─ ▾ 📁 agents
│ ├─ 📝 CLAUDE-PLUGIN.md Markdown 43L · 1.7 KB
│ └─ 📝 OPENCLAW.md Markdown 451L · 16.1 KB
├─ ▾ 📁 amazon
│ ├─ 📋 _meta.json JSON 19L · 760 B
│ └─ 📝 AMAZON.md Markdown 110L · 4.1 KB
├─ ▾ 📁 bigcommerce
│ ├─ 📋 _meta.json JSON 18L · 504 B
│ └─ 📝 BIGCOMMERCE.md Markdown 111L · 3.1 KB
├─ ▾ 📁 generic
│ ├─ 📋 _meta.json JSON 14L · 476 B
│ └─ 📝 GENERIC.md Markdown 158L · 4.6 KB
├─ ▾ 📁 magento
│ ├─ 📋 _meta.json JSON 19L · 739 B
│ └─ 📝 MAGENTO.md Markdown 119L · 3.4 KB
├─ ▾ 📁 shopify
│ ├─ 📋 _meta.json JSON 20L · 753 B
│ └─ 📝 SHOPIFY.md Markdown 274L · 9.1 KB
├─ ▾ 📁 squarespace
│ ├─ 📋 _meta.json JSON 18L · 511 B
│ └─ 📝 SQUARESPACE.md Markdown 97L · 3.0 KB
├─ ▾ 📁 wix
│ ├─ 📋 _meta.json JSON 18L · 679 B
│ └─ 📝 WIX.md Markdown 67L · 2.2 KB
├─ ▾ 📁 woocommerce
│ ├─ 📋 _meta.json JSON 19L · 666 B
│ └─ 📝 WOOCOMMERCE.md Markdown 112L · 3.5 KB
├─ 📋 _meta.json JSON 14L · 387 B
├─ 📝 CHECKOUT-GUIDE.md Markdown 214L · 6.8 KB
├─ 📝 HEARTBEAT.md Markdown 87L · 2.8 KB
├─ 📝 MANAGEMENT.md Markdown 99L · 2.5 KB
├─ 📝 MY-STORE.md Markdown 530L · 15.0 KB
├─ 📝 SHOPPING-GUIDE.md Markdown 217L · 7.7 KB
├─ 📋 skill.json JSON 46L · 1.2 KB
├─ 📝 SKILL.md Markdown 605L · 26.0 KB
├─ 📝 STRIPE-X402-WALLET.md Markdown 204L · 5.8 KB
└─ 📝 WEBHOOK.md Markdown 121L · 4.8 KB

Security Positives

✓ Pure documentation skill with no executable code (28 files, all Markdown or JSON)
✓ All network operations documented and restricted to creditclaw.com API
✓ Comprehensive security architecture described (AES-256-GCM encryption, server-side guardrails, sub-agent isolation)
✓ Clear credential management - only uses CREDITCLAW_API_KEY from environment
✓ Strong security warnings against API key leakage to third parties
✓ Server-side spending controls prevent unauthorized purchases
✓ No obfuscation, no base64 payloads, no suspicious patterns detected
✓ Documentation is consistent with stated functionality (no doc-to-code mismatch since there's no code)
✓ Open source repository reference (github.com/jononovo/claw-skill) provides transparency