Agentic Commerce — Lifestyle, Wellness, & Gifts

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a disclosed shopping API skill, but it can create real checkout orders and send purchase details to the store, so users should confirm order and payment details carefully.

Install only if you want an agent to shop through forthecult.store. Before any checkout or crypto payment, personally verify the cart, shipping information, token/network, payment amount, and payment address; do not let automatic error recovery change purchase details without your approval.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may help create an actual order and provide cryptocurrency payment instructions, so an incorrect item, address, chain, token, amount, or destination address could cause inconvenience or financial loss if the user pays.

Why it was flagged

The checkout API can create real purchase orders and requires customer email, shipping details, payment method, and optional wallet address. This is expected for the skill, but it is high-impact and should stay user-confirmed.

Skill content
Complete field specification for creating an order. This is the core Agentic Commerce endpoint — where an agent converts product discovery into a real purchase.
Recommendation

Require a final user review of items, quantities, shipping address, payment chain/token, amount, and destination address before submitting checkout or instructing payment.

What this means

If API suggestions are wrong or unexpected, the agent could retry with altered queries or endpoints without asking first.

Why it was flagged

The skill tells agents to follow API-provided suggestions automatically, including retrying searches or calling suggested endpoints. This is purpose-aligned error recovery, but remote response text should not override the user's purchase intent.

Skill content
agents should always check for the `error` key and use `suggestions` to auto-recover without human intervention
Recommendation

Allow automatic recovery for harmless searches and documented status calls only; ask the user before changing checkout fields, substitutions, quantities, payment methods, or addresses.

What this means

If a runtime supplies this identity header, the store may receive agent identity/profile context for the listed agent-only endpoints.

Why it was flagged

The skill documents an optional runtime-supplied identity token. The artifacts bound it to specific endpoints and say not to send it for normal store operations.

Skill content
Identity header: `X-Moltbook-Identity` is optional and only for agent-only endpoints (`/api/agent/me`, `/api/agent/me/orders`, `/api/agent/me/preferences`)
Recommendation

Only attach the identity header when the runtime explicitly provides it and only for the documented agent-only endpoints.