MasterCard AgentPay | Compatible compatible cards, wallets & payments

Name/description describe a payments platform and the skill only requests CREDITCLAW_API_KEY and documents API calls to https://creditclaw.com/api/v1 — these requirements match the stated purpose (creating checkouts, wallet signing, encrypted-card flow, management).

SKILL.md and companion docs instruct the agent to call CreditClaw API endpoints, poll status, request single-use decryption keys, and perform ephemeral decryption in memory. They do not instruct reading unrelated files or exfiltrating secrets to other domains; the docs explicitly warn not to send the API key to any domain except creditclaw.com/api/*.

This is an instruction-only skill with no install spec and no code files to execute. No packages, downloads, or extract steps are required — minimal surface area for code-install risk.

Only a single environment variable (CREDITCLAW_API_KEY) is declared and used. That is appropriate and proportional for a service that performs authenticated payment operations. No unrelated credentials or config paths are requested.

The skill is not marked always:true and does not request system-wide configuration or credentials belonging to other skills. It does instruct ephemeral handling of decrypted card data (must be kept only in memory), which is appropriate for its function.