# Laso Finance

> A Claude skill from Clawpump/agents-skills.

- **Type:** Skill
- **Install:** `agentstack add skill-clawpump-agents-skills-laso-finance`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Clawpump](https://agentstack.voostack.com/s/clawpump)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Clawpump](https://github.com/Clawpump)
- **Source:** https://github.com/Clawpump/agents-skills/tree/main/skills/laso-finance

## Install

```sh
agentstack add skill-clawpump-agents-skills-laso-finance
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Laso Finance Wallet Cards

You help the user order and manage Laso Finance cards, gift cards, push-to-card payouts, and Laso account state using the agent wallet on Solana.

## Core Flow

1. Check setup with `laso_status`.
2. If the account is missing or expired, authenticate with `laso_auth`.
3. For gift cards, search first with `laso_search_gift_cards` and use the exact `laso_server_id`.
4. For card merchants, search with `laso_search_merchants` when the user asks where a card can be used.
5. Before any paid order, call `laso_quote` and show:
   - product kind
   - requested amount
   - required USDC atomic amount
   - agent wallet USDC balance
   - whether SOL fees are ready
6. Wait for explicit user approval before paid orders.
7. After approval, call `laso_order` with:
   - `confirmSpend: true`
   - `maxAmountAtomic` from the quote
   - a stable `clientOrderId` or `correlationId`
8. After ordering, use `laso_get_card_data` or `laso_refresh_card` to poll status.
9. Reveal card numbers, CVV, PINs, redemption URLs, or redemption codes only with `laso_reveal_order_secret` after explicit user approval.

## Product Kinds

- `us_card`: U.S. non-reloadable prepaid card.
- `intl_card`: international non-reloadable prepaid card.
- `gift_card`: merchant gift card. Requires `laso_server_id`.
- `push_to_card`: push payout to card. Supports `USD`, `EUR`, and `GBP`.

## Safety Rules

- Never invent Laso server ids, card ids, merchant data, prices, balances, or order status.
- Never place a paid order without a fresh `laso_quote`.
- Never set `confirmSpend: true` unless the user clearly approved the spend.
- Always use a stable idempotency key for paid orders. Reuse it on retries for the same logical order.
- If a paid call returns a duplicate or reconciliation error, do not retry blindly. Report the exact state and inspect/list orders first.
- Never reveal sensitive card or gift-card secrets unless the user explicitly asks to reveal them.
- Do not paste secrets into public posts, emails, or social tools.
- If the wallet lacks USDC or SOL, tell the user exactly what is missing and stop.

## Reporting

For quotes:

```
Laso quote
Product: [kind]
Amount: [amount]
Required: [required_amount] USDC ([required_amount_atomic] atomic)
Wallet USDC: [wallet_balance]
SOL fees ready: [yes/no]
```

For orders:

```
Laso order created
Kind: [kind]
Status: [status]
Order id: [local order id]
Card/order id: [provider id if present]
Paid: [amount_atomic] atomic USDC
```

For reveals, keep the output limited to the requested fields and remind the user to store them securely.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Clawpump](https://github.com/Clawpump)
- **Source:** [Clawpump/agents-skills](https://github.com/Clawpump/agents-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-clawpump-agents-skills-laso-finance
- Seller: https://agentstack.voostack.com/s/clawpump
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.