ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      codejika

      Safety Report

      Perplexity Computer Payments | Make payments with Perplexity Computer

      @codejika

      Perplexity Computer Payments | Manage compatible cards, wallets & payments. Financial management for Agents and OpenClaw bots.

      26Downloads
      0Installs
      0Stars
      1Versions
      E-Commerce1,690Finance & Accounting1,347DevOps & Infrastructure1,045Legal & Compliance738

      Security Analysis

      medium confidence
      Suspicious0.08 risk

      The skill's declared purpose (letting an agent make payments) matches the API surface it documents, but there are notable inconsistencies and high-risk instructions (handling one-time decryption of full card data) that deserve caution before installing.

      Mar 12, 20269 files3 concerns
      Purpose & Capabilitynote

      The skill's functionality (creating checkouts, wallets, signing x402 payments, encrypted-card checkout) is coherent with a payment service and the single required env var (CREDITCLAW_API_KEY). However the registry name/description (Perplexity/Perplexity Computer) doesn't clearly match internal metadata and file names (creditclaw/creditclaw.com), which could indicate repackaging or a naming mismatch that should be clarified.

      Instruction Scopeconcern

      Runtime instructions explicitly tell the agent to retrieve one-time decryption keys and perform AES-256-GCM decryption of card details in-memory, accept encrypted card payloads via webhooks/messages, and complete merchant checkouts using decrypted PAN/CVV data. Handling raw card data is highly sensitive (PCI-level data) and increases risk — even though the docs insist on ephemeral in-memory use, the agent will be asked to process full card data which may be inappropriate for many agent runtimes or environments.

      Install Mechanismok

      Instruction-only skill with no install spec and no binaries — lowest install risk. All referenced URLs point to creditclaw.com (no obscure download hosts).

      Credentialsnote

      Only a single credential (CREDITCLAW_API_KEY) is required, which is proportionate to a payment API. That API key is highly sensitive because it authorizes spending; the docs repeatedly warn not to leak it. Verify the API key provider and that you trust the service before granting it to any agent.

      Persistence & Privilegeok

      Skill is not always-on and does not request special persistent platform privileges. It documents ephemeral operations (one-time keys, single-use tokens) and does not ask to modify other skills or system-wide settings.

      Guidance

      This skill is plausibly what it says (a payment layer) but be careful: it asks your agent to handle full card data by fetching one-time decryption keys and decrypting PAN/CVV in-memory — a high-sensitivity operation with PCI implications. Before installing: 1) Confirm the provider identity (creditclaw.com) and why the registry entry mentions Perplexity — ask the publisher to clarify the naming mismatch. 2) Only provide CREDITCLAW_API_KEY if you trust the service and the agent runtime is allowed/approved to handle card data; consider compliance (PCI) and whether your environment has appropriate secret handling and audit controls. 3) Ensure webhook callback URLs and any storage the agent uses are secure and that the agent will not persist decrypted data. 4) If you don't need the encrypted-card rail, limit the skill's use to readonly endpoints (balance, status) or avoid installing it. If you want higher assurance, request proof of PCI controls from the provider or a signed attestation that card PANs will never be logged or persisted.

      Latest Release

      v1.0.0

      Initial release of perplexity-pay (CreditClaw financial rails for agents): - Securely manage cards, wallets, and agent payments through CreditClaw. - Supports multiple payment rails: owner's card, Stripe x402 wallet, and (soon) Crossmint wallet. - Strict owner approval required by default; granular permissions, real-time oversight. - Enhanced security: hashed API keys, encrypted card data (AES-256-GCM), server-side guardrails, rate-limiting, and access logging. - Easy registration, real-time webhooks, and detailed documentation for each function at dedicated URLs. - Designed for use by AI Agents and OpenClaw bots; no local install needed.

      More by @codejika

      CreditClaw Amazon | Order & Checkout at Amazon.com securely

      4 stars

      ShopClaw | Give your claw shopping tasks with strict controls

      4 stars

      CreditClaw | Give your agent a wallet or credit card

      2 stars

      CashClaw | Give your agent a wallet or credit card

      1 stars

      MasterCard AgentPay | Compatible compatible cards, wallets & payments

      0 stars

      Authorize.net Agentic Payments - Add agentic cards and wallets to your stack

      0 stars

      Published by @codejika on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]