Use when an AI agent must operate on Nevermined autonomously — purchase a payment plan via the x402 protocol (crypto or card), enroll a card and create a spe...
Security Analysis
high confidenceThis skill is a payment-integration guide that handles API keys and payment tokens, but the sensitive behavior is disclosed and fits its stated purpose.
The skill is explicitly for Nevermined payment operations, including buying plans, creating spending delegations, checking balances, and adding x402 paywalls; these are high-impact financial capabilities but are coherent with the stated purpose.
Instructions generally scope live-money activity by defaulting to sandbox, requiring explicit user choice for live, requiring human browser steps for first API key and card enrollment, and warning not to log secrets. Some examples still need careful operator handling because payment-signature tokens are bearer credentials.
The artifact consists of Markdown documentation and reference files only, with no executable scripts or install hooks. Package install commands are normal SDK/CLI setup examples for the documented integration.
The required NVM_API_KEY environment variable and network calls to Nevermined APIs are expected for payment SDK and REST workflows. The documentation also distinguishes sandbox from live environments.
The skill tells agents to store API keys and delegation IDs for reuse, which is expected for payment automation, and includes guidance to avoid cleartext logging or storage. No background persistence, startup hooks, or privilege escalation were found.
Guidance
Install only if you intend to integrate or operate Nevermined payments. Start in sandbox, treat NVM_API_KEY, delegation IDs, payment method IDs, and payment-signature tokens as secrets, use HTTPS for real deployments, set tight spending limits and short delegation durations, and review any live-money action before allowing an agent to execute it.
Latest Release
v1.0.0
Nevermined Payments Skill 1.0.0 - Initial release of the nevermined-payments skill (version 0.5.0). - Provides detailed REST and SDK workflows for autonomous agent payments, including buying plans, card enrollment, delegations, API key management, and revenue/credits queries. - Covers both agent (REST) and developer (SDK for TypeScript/Python) modes. - Includes full environment setup, x402 protocol summary, and guidance for API version pinning. - References documentation for payload details and advanced operations. - Suitable for integrating x402 payment protection into TypeScript or Python AI agents.
Popular Skills
Published by @nevermined-io on ClawHub
