Agent Commerce Foundations: 6-Guide Bundle for Building Autonomous Transaction Systems

The complete foundation for agent-to-agent commerce. Covers B2B transactions, API migration, security hardening, payment rails, pricing strategy, and multi-a...

Security Scan

This is an instruction-only documentation bundle but it declares three sensitive required environment credentials (including a Stripe API key and an agent signing key) that are not justified by the file contents, which is inconsistent and risky.

Purpose & Capability

The SKILL.md is a set of guides (documentation) about agent commerce; a pure guide bundle does not need runtime access to GREENHELIX_API_KEY, AGENT_SIGNING_KEY, or STRIPE_API_KEY. Requesting those secrets is disproportionate to the stated purpose and suggests either misconfiguration or potential misuse.

Instruction Scope

The runtime instructions are purely metadata and descriptive; they contain no commands or steps that would require reading or using environment credentials. This mismatch (no runtime usage while creds are declared required) is a red flag.

Install Mechanism

No install spec and no code files are present, which minimizes on-disk execution risk; the skill is instruction-only.

Credentials

Three sensitive variables are required: a platform API key (GREENHELIX_API_KEY), a signing key (AGENT_SIGNING_KEY), and a payment provider key (STRIPE_API_KEY). None are justified by the content. In particular, AGENT_SIGNING_KEY and STRIPE_API_KEY are high-sensitivity secrets that should not be requested by a documentation-only bundle.

Persistence & Privilege

The skill is not always-enabled and uses default autonomous invocation; it does not request system-wide configuration or modify other skills. No elevated persistence or cross-skill access is declared.

What to consider before installing

Do not supply real secrets to this skill. Ask the publisher why a documentation bundle requires GREENHELIX_API_KEY, AGENT_SIGNING_KEY, and STRIPE_API_KEY; legitimate answers would include explicit runtime features that need those keys (which are not present in SKILL.md). If you must test, use isolated/sandboxed environment and minimal-privilege or test API keys (never your Stripe production keys or private signing keys). Prefer a version of the bundle that does not declare required credentials or that documents exactly when and why each secret is needed.

Included Guides

Guide	Individual Price
Agent-to-Agent Commerce: Build Autonomous B2B Transactions	$29.00
Agent Commerce Migration Guide: Retrofit Your REST APIs for Autonomous Agent Buyers	$39.00
Locking Down Agent Commerce: The OWASP-Aligned Security Guide for Autonomous AI Agents on GreenHelix	$29.00
The Agent Payment Rails Playbook	$29.00
The Agent Pricing & Monetization Playbook	$29.00
The Multi-Agent Commerce Cookbook: Orchestrating Agent Teams That Discover, Negotiate, Pay, and Verify Each Other	$29.00

Total Value: $184.00 | Bundle Price: $149.00