Perplexity Computer Payments | Manage compatible cards, wallets & payments. Financial management for Agents and OpenClaw bots.
Security Analysis
medium confidenceThe skill's declared purpose (letting an agent make payments) matches the API surface it documents, but there are notable inconsistencies and high-risk instructions (handling one-time decryption of full card data) that deserve caution before installing.
The skill's functionality (creating checkouts, wallets, signing x402 payments, encrypted-card checkout) is coherent with a payment service and the single required env var (CREDITCLAW_API_KEY). However the registry name/description (Perplexity/Perplexity Computer) doesn't clearly match internal metadata and file names (creditclaw/creditclaw.com), which could indicate repackaging or a naming mismatch that should be clarified.
Runtime instructions explicitly tell the agent to retrieve one-time decryption keys and perform AES-256-GCM decryption of card details in-memory, accept encrypted card payloads via webhooks/messages, and complete merchant checkouts using decrypted PAN/CVV data. Handling raw card data is highly sensitive (PCI-level data) and increases risk — even though the docs insist on ephemeral in-memory use, the agent will be asked to process full card data which may be inappropriate for many agent runtimes or environments.
Instruction-only skill with no install spec and no binaries — lowest install risk. All referenced URLs point to creditclaw.com (no obscure download hosts).
Only a single credential (CREDITCLAW_API_KEY) is required, which is proportionate to a payment API. That API key is highly sensitive because it authorizes spending; the docs repeatedly warn not to leak it. Verify the API key provider and that you trust the service before granting it to any agent.
Skill is not always-on and does not request special persistent platform privileges. It documents ephemeral operations (one-time keys, single-use tokens) and does not ask to modify other skills or system-wide settings.
Guidance
This skill is plausibly what it says (a payment layer) but be careful: it asks your agent to handle full card data by fetching one-time decryption keys and decrypting PAN/CVV in-memory — a high-sensitivity operation with PCI implications. Before installing: 1) Confirm the provider identity (creditclaw.com) and why the registry entry mentions Perplexity — ask the publisher to clarify the naming mismatch. 2) Only provide CREDITCLAW_API_KEY if you trust the service and the agent runtime is allowed/approved to handle card data; consider compliance (PCI) and whether your environment has appropriate secret handling and audit controls. 3) Ensure webhook callback URLs and any storage the agent uses are secure and that the agent will not persist decrypted data. 4) If you don't need the encrypted-card rail, limit the skill's use to readonly endpoints (balance, status) or avoid installing it. If you want higher assurance, request proof of PCI controls from the provider or a signed attestation that card PANs will never be logged or persisted.
Latest Release
v1.0.0
Initial release of perplexity-pay (CreditClaw financial rails for agents): - Securely manage cards, wallets, and agent payments through CreditClaw. - Supports multiple payment rails: owner's card, Stripe x402 wallet, and (soon) Crossmint wallet. - Strict owner approval required by default; granular permissions, real-time oversight. - Enhanced security: hashed API keys, encrypted card data (AES-256-GCM), server-side guardrails, rate-limiting, and access logging. - Easy registration, real-time webhooks, and detailed documentation for each function at dedicated URLs. - Designed for use by AI Agents and OpenClaw bots; no local install needed.
More by @codejika
CreditClaw Amazon | Order & Checkout at Amazon.com securely
4 stars
ShopClaw | Give your claw shopping tasks with strict controls
4 stars
CreditClaw | Give your agent a wallet or credit card
2 stars
CashClaw | Give your agent a wallet or credit card
1 stars
MasterCard AgentPay | Compatible compatible cards, wallets & payments
0 stars
Authorize.net Agentic Payments - Add agentic cards and wallets to your stack
0 stars
Published by @codejika on ClawHub