What is safe-shopping-and-payments?

A safety workflow for researching products and preparing checkout or payment decisions without placing the order automatically.

Use it for shopping, subscriptions, invoices, payment links, carts, refunds, and cancellations. It prepares a reviewable purchase decision but does not pay or place the order without explicit approval.

It helps prevent accidental purchases by checking the seller, price, fees, delivery, return terms, and payment details before stopping for approval.

safe-shopping-and-payments — Skill for Claude Code and Codex by CodeInfinity1: A safety workflow for researching products and preparing chec

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/codeinfinity1/stram/safe-shopping-and-payments

Any agent

npx skills add CodeInfinity1/Stram --skill safe-shopping-and-payments

Clone the repo

git clone --depth 1 https://github.com/CodeInfinity1/Stram

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/codeinfinity1/stram/safe-shopping-and-payments.svg)](https://agentmods.dev/skills/codeinfinity1/stram/safe-shopping-and-payments)

Your own site

<a href="https://agentmods.dev/skills/codeinfinity1/stram/safe-shopping-and-payments"><img src="https://agentmods.dev/badge/skills/codeinfinity1/stram/safe-shopping-and-payments.svg" alt="Measured on agentmods" height="20"></a>

Per session 26 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 474 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00026	$0.00474
Opus 5	$0.00013	$0.00237
Sonnet 5	$0.00005	$0.00095
Haiku 4.5	$0.00003	$0.00047

Measured 6d ago against content hash 3348356c0e45, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

safe-shopping-and-payments scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/commerce-travel/safe-shopping-and-payments/SKILL.md · 72 lines

How it starts

The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Safe Shopping And Payments

Purpose

Protect the user around money. This skill separates research, cart preparation, checkout review, payment, and confirmation.

When To Use

Use for purchases, subscriptions, checkout pages, invoices, payment links, carts, refunds, cancellations, and financial messages.

Inputs And Evidence

Item/service, seller, price, taxes, shipping, return terms, payment method, and user approval.
Browser/cart/payment page evidence.

Tool Map

shopping-assistant
shopping_comparison_create
shopping_comparison_inspect
purchase_intent_prepare
purchase_intent_inspect
web-form-automation
browser_live_observe
message-approval-policy
approval-gated-external-actions
secrets-handling

Workflow

Research/compare before checkout.
Verify seller, price, fees, return terms, and delivery.
Use purchase_intent_prepare for cart, checkout, purchase, subscription, refund, cancellation, or payment-review artifacts.
Use purchase_intent_inspect to confirm prepared_not_purchased, approval requirement, check count, and no credential storage.
Stop before payment/order placement unless explicit approval is given.
Verify confirmation/order status only from tool/browser evidence.

Native Implementation Boundaries

Use Stram browser and approval tools.
Do not import external reference AgentPay or shopping plugins.
Payment integrations require native, audited tools.
purchase_intent_prepare never stores payment credentials and never executes purchase/payment actions.

Safety And Approval

Purchases and payments are high risk.
Payment details must remain private.
Refunds/cancellations also require approval.

Verification

Purchase claims require confirmation evidence.
Cart/prepared states must be labeled correctly.
Inspect purchase intent artifacts and confirm prepared_not_purchased.
Report price/source timing.

Failure Modes

Accidentally clicking "place order".
Missing recurring subscription terms.
Treating cart as purchase.

Read the full file on GitHub · 72 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

6d ago First seen · 72 lines · 26 tokens per session scan A 3348356c0e45

Subscribe to this mod's changes

safe-shopping-and-payments is a skill published in the GitHub repository CodeInfinity1/Stram (10 stars, last pushed 26d ago), licensed MIT. It adds 26 tokens to every session and 474 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

E-commerce ai-agent ai-agents ai-tools desktop-automation desktop-automation-software desktop-automation-windows

product-match

Find visually or functionally similar products from an image, name, or description. Use when the user asks to "find something like this", match a product from a photo, or source alternates to a given item.

AlpacaLabsLLC/skills-for-architects · 47 tokens

product-pair

Suggest complementary products that pair well with a given item — side tables for sofas, task lights for desks, etc. Use when the user asks "what goes with" a product, wants coordinating pieces, or asks to complete a furniture grouping.

AlpacaLabsLLC/skills-for-architects · 52 tokens

subscription-offers

Generates StoreKit 2 code for all subscription offer types — introductory, promotional, offer codes, and win-back. Includes eligibility checks, offer presentation, and the preferredSubscriptionOffer modifier. Use when adding subscription offers, free trials, or promotional pricing.

rshankras/claude-code-apple-skills · 55 tokens

watermark-engine

Generates a watermark overlay system for images and video with configurable positioning, opacity, tiling, and paywall integration for automatic removal on subscription or purchase. Use when user wants to add branding, attribution, or free-tier watermarks to visual content.

rshankras/claude-code-apple-skills · 54 tokens

monetization

Monetization strategy for iOS/macOS apps. Covers readiness assessment, pricing model selection, tier structuring, free trial strategy, and implementation guidance. Use when deciding what to charge, how to price, or planning monetization end-to-end.