← Back to Skills Marketplace
74
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install my-pay
Description
A payment skill powered by mypay-bot CLI. Use this skill whenever the user wants to pay, make a payment, purchase something, buy items, checkout, transfer mo...
Usage Guidance
This skill mostly looks like a straightforward wrapper around an npm CLI, but two issues merit caution: (1) the SKILL.md requires sensitive env vars (MYPAY_API_KEY and MYPAY_WALLET_SECRET) and node/npm/python3, yet the registry metadata omits those requirements — treat that as an inconsistency and do not provide secrets until you confirm the publisher and necessity; (2) the skill instructs the agent to display and preserve payment URLs and tokens exactly, which can reveal secrets if outputs are forwarded or logged. Before installing or enabling: verify the mypay-bot npm package and its publisher (check npmjs.org and package source), confirm the skill publisher identity, ensure you only provide credentials to a trusted publisher, restrict where the agent can send outputs (don’t allow automatic external posting), and consider running the included Python checker yourself to confirm it only reports status (it appears to). If you cannot confirm the mypay-bot package provenance and the skill publisher, treat the missing metadata and the instruction to surface raw tokens as an unacceptable risk.
Capability Analysis
Type: OpenClaw Skill
Name: my-pay
Version: 1.0.1
The 'my-pay' skill is a standard integration for a payment CLI tool (mypay-bot). It includes a Python dependency checker (scripts/install_mypay.py) that safely verifies the installation and version of the required npm package without performing any automatic or unauthorized installations. The instructions in SKILL.md are well-structured, guiding the agent through a multi-step payment workflow while emphasizing the importance of preserving payment links and requiring manual user intervention for credential setup and package installation.
Capability Tags
Capability Assessment
Purpose & Capability
The SKILL.md and included Python checker align with a mypay-bot CLI integration: requiring node/npm, python3, and two MyPay credentials is reasonable for this payment skill. However, the registry metadata at the top of the package lists no required env vars or binaries, which contradicts the documented runtime requirements — this metadata mismatch is an incoherence that should be resolved before trusting automatic installation or credential configuration.
Instruction Scope
The instructions tell the agent to run included commands (the Python checker and mypay-bot CLI) and to strictly preserve URLs and images "character for character," explicitly including query parameters and tokens. That instruction could lead to sensitive tokens being shown or copied exactly as-is; while it may be required for payment links, it increases the risk of accidental exposure or exfiltration if the agent is allowed to transmit outputs elsewhere. The instructions also say to "cache the summary" without specifying where or how, leaving storage and retention ambiguous.
Install Mechanism
There is no automatic install spec — the included scripts are a dependency checker only and do not modify the system or run npm install. The Python script does call shell commands via subprocess.run(..., shell=True) to run npm list; this is expected for a checker but is worth noting because it executes shell commands. Overall install risk is low because installs are manual per the instructions.
Credentials
The skill requires two sensitive credentials in SKILL.md (MYPAY_API_KEY and MYPAY_WALLET_SECRET), which are proportionate for a payment/wallet integration. The problem is the package's registry metadata did not declare these required environment variables — that mismatch is a red flag because users (and automated permission UIs) may not be prompted for the secrets the skill actually needs.
Persistence & Privilege
The skill does not request persistent system presence (always:false), does not modify other skills or system-wide config, and explicitly instructs users to run installs manually. No elevated persistence or unusual privileges are requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install my-pay - After installation, invoke the skill by name or use
/my-pay - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
my-pay 1.0.1 adds explicit system requirements and credential checks to improve reliability and transparency.
- Added system requirements section specifying python3, node, npm, and mypay-bot CLI.
- Introduced mandatory environment credentials (MYPAY_API_KEY, MYPAY_WALLET_SECRET) with usage instructions.
- The prerequisite script now only checks for installation/version and never modifies the system.
- Installation and updates for mypay-bot must be performed manually by the user; automatic npm install was removed.
- Compatibility and credential requirements are now documented using structured metadata.
v1.0.0
Initial release of the mypay payment skill.
- Handles payment workflows using the mypay-bot CLI tool.
- Guides users through capturing payment intent, checking wallet status, and submitting payments.
- Enforces strict step-by-step flow and command order.
- Prerequisite script checks for installation and update of mypay-bot before each use.
- Maintains all command output links and images exactly as provided.
Metadata
Frequently Asked Questions
What is my-pay?
A payment skill powered by mypay-bot CLI. Use this skill whenever the user wants to pay, make a payment, purchase something, buy items, checkout, transfer mo... It is an AI Agent Skill for Claude Code / OpenClaw, with 74 downloads so far.
How do I install my-pay?
Run "/install my-pay" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is my-pay free?
Yes, my-pay is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does my-pay support?
my-pay is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created my-pay?
It is built and maintained by xhc1111 (@xhc1111); the current version is v1.0.1.
More Skills