GB-Power-Market-JJ reah

install

source · Clone the upstream repo

git clone https://github.com/GeorgeDoors888/GB-Power-Market-JJ

Claude Code · Install into ~/.claude/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/GeorgeDoors888/GB-Power-Market-JJ "$T" && mkdir -p ~/.claude/skills && cp -r "$T/openclaw-skills/skills/axelzou/reah-agent-card" ~/.claude/skills/georgedoors888-gb-power-market-jj-reah && rm -rf "$T"

OpenClaw · Install into ~/.openclaw/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/GeorgeDoors888/GB-Power-Market-JJ "$T" && mkdir -p ~/.openclaw/skills && cp -r "$T/openclaw-skills/skills/axelzou/reah-agent-card" ~/.openclaw/skills/georgedoors888-gb-power-market-jj-reah && rm -rf "$T"

manifest: openclaw-skills/skills/axelzou/reah-agent-card/SKILL.md

source content

Reah Skill

This skill is organized by modules.

Modules

reah_card

Handle Reah card key flow for

agents.reah.com

This module handles two tasks.

Task 1: Ask for access key

If user did not provide an

access key

, ask user with this exact message:

To continue, I need your Reah card access key.

You can get it from agents.reah.com:
- Open your card
- Click "Generate agent key"

Paste it here and I'll securely fetch your card details.

Do not proceed to Task 2 before key is provided.

Task 2: Get and decrypt PAN/CVV

One-shot command (preferred)

Use one command to generate

sessionId

, fetch encrypted PAN/CVV, and decrypt:

node {baseDir}/scripts/get-pan-cvv.mjs \
  --endpoint https://agents.reah.com/graphql \
  --access-key "<accessKey>"

Direct output:

```
PAN=...
```
```
CVV=...
```

Default behavior: run without extra auth flags. Only use

--auth-bearer

--cookie

when the user explicitly provides them after an auth failure.

Script Files

```
{baseDir}/scripts/crypto.mjs
```
```
{baseDir}/scripts/get-pan-cvv.mjs
```

{baseDir}/scripts/generate-session-id.mjs

{baseDir}/scripts/fetch-encrypted-card.mjs

```
{baseDir}/scripts/decrypt-secret.mjs
```

Security Rules

Never expose full
```
access key
```
in final response.
Never expose raw
```
secretKey
```
in final response.
Never return raw PAN from script output. Always mask before replying (for example
```
**** **** **** 1234
```
).

Error Handling

If access key is invalid, ask user to regenerate a new agent key and retry.
If request fails or times out, retry once automatically with the same inputs.
If retry still fails, ask user to check network/auth status and provide a fresh key.