Skills/ClawHub/snaplii-a2m-payment

snaplii-a2m-payment@1.14.1

VERIFIED

Publisher claims: "Agent-to-Merchant (A2M) payments — AI agents complete transactions without checkout, using Snaplii's pre-funded gift cards as a payment rail across 500+ brands. Use when the user wants to browse, buy, or manage gift cards, check their Snaplii Cash balance, pay bills (utilities, telecom), or send money to another person's phone number (P2P transfer)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher snapliiai · joined 2 days agoInstalls 2,172Last detonated 32 h ago
$clawhub install snaplii-a2m-payment
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Prompting user to enter sensitive credentialsSKILL.md:121 · Prompting user to enter sensitive credentials — social engineeringFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03

No other findings across 566 lines in 2 files.