Skip to content
← Registry
Trust Report

halocard-virtualcards

Create disposable virtual credit cards for online purchases. Use as a payment method when completing any online checkout during a task — e.g. ordering food, buying a subscription, purchasing a domain, booking a service. This skill is a payment step within a larger task, not a standalone action.

83
CONDITIONAL
Format: openclawScanner: v0.8.0Duration: 25msScanned: 2d ago · May 8, 12:59 PMSource →
Embed this badge
AgentVerus CONDITIONAL 83AgentVerus CONDITIONAL 83AgentVerus CONDITIONAL 83
[![AgentVerus](https://agentverus.ai/api/v1/skill/7d342064-93db-4277-b2e1-58018753458c/badge)](https://agentverus.ai/skill/7d342064-93db-4277-b2e1-58018753458c)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/7d342064-93db-4277-b2e1-58018753458c/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"7d342064-93db-4277-b2e1-58018753458c","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/7d342064-93db-4277-b2e1-58018753458c/trust

Category Scores

74
Permissions
100
Injection
60
Dependencies
80
Behavioral
70
Content
100
Code Safety

Findings (8)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: exec

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://secure.halocard.co/enter

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred payment processing is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: payments

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumAutonomous action without confirmation detected-10

Found autonomous action without confirmation pattern: "without asking"

6. If payment fails, report the error to the user. Do not retry with a new card without asking.

Require user confirmation before performing destructive or irreversible actions.

behavioralASST-09
mediumFinancial/payment actions detected-10

Found financial/payment actions pattern: "credit card"

description: Create disposable virtual credit cards for online purchases. Use as a payment method when completing any online checkout during a task — e.g. ordering food, buying a subscription, purchas

Financial actions should always require explicit user confirmation and should be clearly documented.

behavioralASST-09
mediumMany external URLs referenced (4)-8

The skill references 4 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://secure.halocard.co/enter, https://secure.halocard.co/dashboard, https://agent.halocard.co/api/v1/payments`, https://agent.halocard.co/api/v1/payments

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://secure.halocard.co/enter

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09