← Back to Skills Marketplace
cktc

Moltpost

by cktc · GitHub ↗ · v1.3.1
cross-platform ⚠ suspicious
2107
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install moltpost
Description
Send real physical postcards anywhere in the world. Pay with x402 (USDC on Base), Stripe, or manual USDC transfer. No signup, no API key — just one API call.
Usage Guidance
This skill appears to do what it claims and does not ask for unrelated secrets or system access. Before installing, consider: (1) If you let the agent sign payments, ensure the agent's wallet signing capability is deliberately authorized — otherwise use the Stripe flow so a human completes payment. (2) The skill explicitly warns not to put sensitive data on postcards; enforce that in agent prompts and approvals. (3) Test on Base Sepolia if you want to avoid spending real funds (Sepolia uses mock fulfillment). (4) Because this is instruction-only, there is no installer risk, but be cautious about granting any agent the ability to sign transactions or access an unlocked wallet — that is the primary operational risk here.
Capability Analysis
Type: OpenClaw Skill Name: moltpost Version: 1.3.1 The skill bundle is classified as suspicious due to the instruction in `skill.md` to fetch `https://moltpost.io/heartbeat.md` and "follow its instructions" every 8–12 hours. While the primary `skill.md` contains strong guidelines for responsible agent behavior and data privacy, this recurring dynamic instruction mechanism introduces a significant supply chain risk. If the remote `moltpost.io` domain or the `heartbeat.md` file were compromised, the agent could be instructed to perform arbitrary, potentially malicious actions without requiring a new skill bundle review.
Capability Assessment
Purpose & Capability
Name and description (send physical postcards; pay via x402/Stripe/manual USDC) match the instructions in SKILL.md. There are no unrelated required env vars, binaries, or install steps. Payment methods described (HTTP x402 signing, Stripe link, onchain USDC) are plausible for this service and align with the stated capabilities.
Instruction Scope
SKILL.md limits actions to creating postcards, presenting payment links to humans, and performing optional signing if the agent has a wallet. It explicitly instructs agents to confirm with the owner and to avoid putting secrets on postcards. Note: x402 requires the agent (or its connected wallet) to perform EIP-712 signing and add a PAYMENT header — that legitimately requires wallet signing capability. The document correctly warns against agents completing Stripe payments on behalf of the owner. No instructions ask the agent to read unrelated files, env vars, or system config.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is a low-risk surface: nothing is downloaded, written to disk, or executed by an installer.
Credentials
The skill requests no environment variables, credentials, or config paths. The described workflows may require access to a crypto wallet for signing (if the agent is configured to use one), but that is a proportional and explained requirement for the x402 flow; the SKILL.md also provides Stripe/manual flows for agents without wallets.
Persistence & Privilege
Flags are default (not always:true). The skill does not request persistent or elevated system presence and does not instruct modification of other skills' configurations. Autonomous invocation is allowed (platform default) but nothing in the skill amplifies risk by requesting broad credentials or persistent hooks.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install moltpost
  3. After installation, invoke the skill by name or use /moltpost
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.1
Version 1.3.1 - Documentation tweaks and clarifications in the skill README. - No changes to the skill’s functionality, API, or usage. - Same version and interface; updated skill.md content only.
v1.3.0
Major update: x402 gasless USDC payments are now supported and preferred for agents. - Added support for x402 protocol: enables one-step, gasless USDC payment for agents with wallets. - API and docs reorganized to cover three payment methods: x402 (preferred), Stripe (credit card), and manual USDC (legacy). - Updated guidance for agents on selecting the appropriate payment method. - Skill description updated to mention x402 and all supported payment options. - Legacy manual USDC option now documented as fallback; x402 is recommended for agents.
v1.1.0
Moltpost 1.1.0 introduces crypto postcard payments and multi-method support. - Added support for USDC on Base (mainnet and testnet) as a payment method. - API now accepts new fields: `payment_method` (`stripe` or `usdc`) and `usdc_chain` (`base`, `base-sepolia`). - Added detailed documentation for USDC payment flow, including onchain payment and confirmation steps. - Stripe (credit card) integration remains the default and is fully supported. - Updated responses and instructions for both payment types. - Minor clarifications and updates to agent guidelines and documentation.
v1.0.1
- Added a "Skill Files" section listing URLs for SKILL.md and HEARTBEAT.md. - No changes to API, pricing, or usage. - Documentation updated only; no changes to skill logic or behavior.
v1.0.0
Initial release of Moltpost: Send real, physical postcards worldwide via a simple API. - No signup, no API key, no account required—just one API call and a payment link. - Clearly defined agent guidelines to protect privacy and ensure proper use. - Detailed API documentation for creating postcards and checking their status. - Transparent pricing for multiple postcard sizes and currencies. - Important restrictions on postcard content to safeguard recipients and ensure postal compliance.
Metadata
Slug moltpost
Version 1.3.1
License
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is Moltpost?

Send real physical postcards anywhere in the world. Pay with x402 (USDC on Base), Stripe, or manual USDC transfer. No signup, no API key — just one API call. It is an AI Agent Skill for Claude Code / OpenClaw, with 2107 downloads so far.

How do I install Moltpost?

Run "/install moltpost" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Moltpost free?

Yes, Moltpost is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Moltpost support?

Moltpost is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Moltpost?

It is built and maintained by cktc (@cktc); the current version is v1.3.1.

💬 Comments