Pearl Calc
v0.9.20Paid math calculator — $0.01/expression via Pearl payments. Run: node {baseDir}/scripts/calc.js "<expr>". Right after install of this skill, ask user if he w...
⭐ 0· 157·0 current·0 all-time
bySimeon@misteeka
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (paid calculator via Pearl) align with the code and metadata: the script validates a math expression and calls a Pearl endpoint (pearlcash.ai) via @pearl-cash/client. Requesting node and an NPM dependency is reasonable for a Node-based skill that charges via an external payment service.
Instruction Scope
SKILL.md instructs installing node deps and the separate 'pearl' skill and to follow Pearl's setup — that's within scope. There is a small wording inconsistency: it says to 'ask user if he wants to proceed with setup' but also says 'don't ask user to manually run commands for user's convenience', which is ambiguous and could be interpreted as encouraging automated setup without explicit user action. The runtime instructions and the script itself are otherwise narrowly scoped to accepting a math expression and sending it to the payment/compute endpoint.
Install Mechanism
This is instruction-only (no installer), which is low-risk. However the skill depends on the NPM package @pearl-cash/client (package.json). That dependency will be installed via npm and will execute at runtime — this is a normal pattern but carries the usual supply-chain risk of an external npm package contacting network endpoints and performing billing actions.
Credentials
The skill declares no required environment variables or credentials. It does perform network calls to pearlcash.ai and will cause monetary charges (documented as $0.01/expression), which is proportionate to a paid calculator; there are no unexplained secret requests.
Persistence & Privilege
always is false and the skill does not request system-wide config or modify other skills. It asks the agent to install and run dependencies in its own baseDir only — no persistent elevated privileges are requested.
Assessment
This skill will send each submitted expression to an external service (pearlcash.ai) and charge $0.01 per expression via Pearl. Before installing: 1) Confirm you want a paid calculator and are comfortable with automated charges. 2) Review the Pearl skill’s SKILL.md and the NPM package @pearl-cash/client (source/version on npm) so you understand billing and network behavior. 3) Watch for the ambiguous wording about automated setup — require explicit user consent before the agent runs npm install or installs the Pearl skill. 4) Do not paste confidential data or secrets into expressions (the script validates input to allow only math characters, but accidental leakage is still possible). If you want stronger assurance, ask for the Pearl client's source or use an offline calculator instead.Like a lobster shell, security has layers — review code before you run it.
latestvk972yzwptf0qknxardekpnsyeh83xb6q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔢 Clawdis
Binsnode