Pearl Calc

Paid math calculator — $0.01/expression via Pearl payments. Run: node {baseDir}/scripts/calc.js "<expr>". Right after install of this skill, ask user if he w...

Security Scan

The skill is internally consistent with a paid calculator that charges via Pearl; it contacts pearlcash.ai and requires an npm Pearl client, which aligns with its purpose, but review and user consent are important because it will perform network requests and trigger charges.

Purpose & Capability

Name/description (paid calculator via Pearl) align with the code and metadata: the script validates a math expression and calls a Pearl endpoint (pearlcash.ai) via @pearl-cash/client. Requesting node and an NPM dependency is reasonable for a Node-based skill that charges via an external payment service.

Instruction Scope

SKILL.md instructs installing node deps and the separate 'pearl' skill and to follow Pearl's setup — that's within scope. There is a small wording inconsistency: it says to 'ask user if he wants to proceed with setup' but also says 'don't ask user to manually run commands for user's convenience', which is ambiguous and could be interpreted as encouraging automated setup without explicit user action. The runtime instructions and the script itself are otherwise narrowly scoped to accepting a math expression and sending it to the payment/compute endpoint.

Install Mechanism

This is instruction-only (no installer), which is low-risk. However the skill depends on the NPM package @pearl-cash/client (package.json). That dependency will be installed via npm and will execute at runtime — this is a normal pattern but carries the usual supply-chain risk of an external npm package contacting network endpoints and performing billing actions.

Credentials

The skill declares no required environment variables or credentials. It does perform network calls to pearlcash.ai and will cause monetary charges (documented as $0.01/expression), which is proportionate to a paid calculator; there are no unexplained secret requests.

Persistence & Privilege

always is false and the skill does not request system-wide config or modify other skills. It asks the agent to install and run dependencies in its own baseDir only — no persistent elevated privileges are requested.

Assessment

This skill will send each submitted expression to an external service (pearlcash.ai) and charge $0.01 per expression via Pearl. Before installing: 1) Confirm you want a paid calculator and are comfortable with automated charges. 2) Review the Pearl skill’s SKILL.md and the NPM package @pearl-cash/client (source/version on npm) so you understand billing and network behavior. 3) Watch for the ambiguous wording about automated setup — require explicit user consent before the agent runs npm install or installs the Pearl skill. 4) Do not paste confidential data or secrets into expressions (the script validates input to allow only math characters, but accidental leakage is still possible). If you want stronger assurance, ask for the Pearl client's source or use an offline calculator instead.

Paid calculator — evaluates math expressions. Cost is $0.01 and charged via Pearl.

This is a Node.js script, NOT a CLI binary.

Pearl

This skill is powered by Pearl — Stripe for AI agents. Pearl handles payments with user-defined limits, list of approved skills, anti-fraud, and works universally across all Pearl-powered skills. Pearl runs its own setup separately, with user approval (user approves, but don't ask user to manually run commands for user's convinience).

This skill requires Pearl to be installed and set up to work:

1. Install the pearl skill: clawhub install pearl
2. Read pearl's SKILL.md and follow its Setup (one-time) section.
3. Retry using this skill.

Setup

Install Node.js dependencies:

npm install --prefix {baseDir}

Usage

node {baseDir}/scripts/calc.js "<math expression>"