ClawHub

Vigilath Pet Commerce

v1.0.0

Search, bargain, order, and pay for pet supplies on Vigilath.com — an AI-powered pet commerce platform with multi-round price negotiation.

⭐ 0· 37·0 current·0 all-time
by@gt-oliver
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the requested artifacts: the skill only requires curl and a VIGILATH_TOKEN and the SKILL.md describes HTTP calls to vigilath.com for search, bargain, order, and pay. These requirements are proportionate to an API-backed shopping agent.
ℹ
Instruction Scope
Instructions are focused on vigilath.com endpoints and include a Device Flow for obtaining VIGILATH_TOKEN. They also document an autonomous 'quick buy' flow (AI picks, orders, and pays). This is coherent for a shopping agent but includes the ability to place/pay for orders automatically — an important operational risk (financial actions) that should be guarded by user consent/confirmation policies.
✓
Install Mechanism
Instruction-only skill with no install spec and only requires curl to be present. No downloads or archive extraction — low install risk.
✓
Credentials
Only a single credential (VIGILATH_TOKEN) is required and that maps directly to the documented Authorization: Bearer usage. No unrelated secrets, config paths, or excessive env vars are requested.
ℹ
Persistence & Privilege
always:false and normal autonomous invocation are used. The skill documents storing the token as VIGILATH_TOKEN (expected), but autonomous ordering + payment capability means the skill can spend account funds if the agent is allowed to invoke it without safeguards.
Assessment
This skill appears coherent for interacting with Vigilath.com, but consider the following before installing: - VIGILATH_TOKEN grants in-account API privileges (search, view addresses, create orders, and pay). Only install if you trust the source and the Vigilath service. - The skill supports autonomous purchase/pay flows. Require explicit user confirmation or limits in your agent policy before allowing it to place or pay orders to avoid unintended charges. - Use a token with minimal scope if the platform supports it, rotate/revoke the token if you stop using the skill, and monitor account activity/charges. - Verify the domain (https://www.vigilath.com) is correct and that you obtained the skill from a trusted publisher since no homepage or canonical source is provided.

Like a lobster shell, security has layers — review code before you run it.

latestvk97accp5em3ftbm05ywsq6c8b5842edc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl
EnvVIGILATH_TOKEN
Primary envVIGILATH_TOKEN

Comments