ClawHub

Tbc Bank Api

v0.1.0

Use when the user mentions TBC Bank, tbcbank.ge, Georgian bank APIs, PSD2 integration with TBC, account information services (AIS), payment initiation (PIS)...

⭐ 0· 156·0 current·0 all-time
by@erekle1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included documentation (OAuth2, AIS, PIS, TPay, installments). The skill does not request unrelated environment variables, binaries, or config paths — everything present is appropriate for an API integration guide.
✓
Instruction Scope
SKILL.md and the reference files contain only API endpoints, headers, example requests/responses, and code snippets for legitimate integration tasks (token exchange, consent flows, webhooks, mTLS). They do not instruct the agent to read local files, exfiltrate data, or contact unexpected endpoints. The guidance to include PSU-IP-Address and X-Request-ID is standard for PSD2 and is documented consistently.
✓
Install Mechanism
No install spec and no code files to execute — the skill is instruction-only, which minimizes filesystem and supply-chain risk.
✓
Credentials
The repository does not declare or require environment variables or credentials. Code examples reference expected integration secrets (client_id, client_secret, merchantKey, client certificates) which are normal for this kind of integration and proportional to the documented functionality.
✓
Persistence & Privilege
Skill is not always-enabled and is user-invocable; it does not request persistent elevated privileges or modify other skills. Autonomous invocation is allowed (platform default) but is not combined with other concerning factors here.
Assessment
This skill is an API reference and appears internally consistent. Before using it: (1) Treat any client_id/client_secret/merchantKey/certificates as highly sensitive — never paste real secrets into public chats or examples. (2) Use sandbox endpoints for development and validate redirect/callback URLs in the bank's developer portal. (3) Verify webhook signatures (examples are provided) and implement HMAC/mTLS as recommended. (4) Confirm endpoints/paths against TBC Bank's official developer documentation (this appears accurate but mirrors typical examples). (5) Note the skill is configured to trigger when 'TBC' is mentioned in a banking context — if you don't want automatic invocation, control the skill's invocation settings in your agent. Overall the package is a documentation-only helper and does not itself execute code or request unrelated permissions.

Like a lobster shell, security has layers — review code before you run it.

latestvk97er8t4aqxjqffvhdwzqs8g5x8324ja

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments