← Back to Skills Marketplace

Ghost Protocol OpenClaw Pay

Name: Ghost Protocol OpenClaw Pay
Author: ghostprotoinfra

by ghostprotoinfra · GitHub ↗ · v1.5.0 · MIT-0

darwinlinuxwin32 ⚠ suspicious

302

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install openclaw-ghost-pay

Description

Discover Ghost payment requirements, execute real x402 calls, report x402 settlements, and run GhostWire quote/prepare/status flows for direct escrow.

Usage Guidance

This package appears to be what it says: helpers to discover payment requirements, call merchant x402 endpoints, report settlements, and handle GhostWire flows. The main risk is the required GHOST_SIGNER_PRIVATE_KEY — it is a high-value signing credential that the scripts use to create settlement-auth signatures and to authorize payments. Only install this skill into agent runtimes that you fully trust, keep the key in secure secret storage (not in plain config or prompts), consider using a limited-purpose signing key if possible, and restrict or require human approval for any autonomous agent actions that can perform live paid requests. Test initially with --dry-run and ensure GHOST_OPENCLAW_BASE_URL is the intended endpoint (do not allow unexpected base-url overrides). Monitor transactions and rotate the key if unexpected activity occurs.

Capability Analysis

Type: OpenClaw Skill Name: openclaw-ghost-pay Version: 1.5.0 The skill bundle provides legitimate-looking tools for Ghost Protocol payments and escrow, but it possesses high-risk capabilities including handling a private key (GHOST_SIGNER_PRIVATE_KEY) for cryptographic signing and making external network requests. Specifically, bin/call-x402.mjs and bin/report-x402-settlement.mjs use the private key to sign transactions and authorization messages sent to ghostprotocol.cc and user-defined merchant endpoints. Furthermore, the documentation in README.md and INSTALL.md references a missing script (scripts/clawhub.ps1) described as applying a 'DNS shim,' which is an unusual and potentially risky networking behavior not fully explained in the provided source code.

Capability Assessment

✓ Purpose & Capability

Name/description (Ghost payment + GhostWire flows) align with the files, declared node binary, and the single required env var GHOST_SIGNER_PRIVATE_KEY. Declared dependencies (viem, x402, x402-fetch) and scripts are appropriate for signing and x402/ghostwire interactions.

✓ Instruction Scope

SKILL.md and the bin/*.mjs helpers only instruct network calls to Ghost endpoints and merchant URLs, and signing of auth payloads with the provided private key. The runtime instructions do not attempt to read unrelated files or environment variables beyond those declared, and they include dry-run and safety guidance.

✓ Install Mechanism

Install is standard Node/npm (package.json lists dependencies). No downloads from arbitrary URLs, no extract-from-unknown-host steps; everything is packaged as source JS helpers and npm dependencies.

ℹ Credentials

Only one required secret: GHOST_SIGNER_PRIVATE_KEY — which is expected and necessary for the skill to sign x402/merchant auth and settlement reports. This is a high-value credential (can produce valid signatures); its request is proportionate but requires careful secret management and use of a key with appropriate scope/limits.

⚠ Persistence & Privilege

always:false (good), but disable-model-invocation is false (normal default) so an agent with this skill and access to the signing key could autonomously execute real paid x402 calls and settlement reports. That behavior is consistent with the skill's purpose but represents operational risk if the key is provided to an agent without adequate human oversight, invocation controls, or runtime isolation.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install openclaw-ghost-pay
After installation, invoke the skill by name or use /openclaw-ghost-pay
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.5.0

openclaw-ghost-pay 1.5.0 - Bumped version to 1.5.0 in all metadata. - Updated documentation in INSTALL.md, README.md, and SKILL.md for clarity. - No breaking changes to environment variables or usage flows. - Minor text edits and formatting improvements across documentation files.

v1.4.0

Version 1.4.0 - Added new environment variables and CLI options for GhostWire flows, including support for request prompts, JSON, wallet, metadata, and explicit spec hash overrides. - Updated documentation and examples in SKILL.md, README.md, QUICKSTART.md, and INSTALL.md to reflect new wire job input options and improved usage clarity. - Enhanced create-wire-job-from-quote to support --request-prompt and related structured fields for clearer consumer task specification. - Refined safe usage guidance for GhostWire, emphasizing separation of task data and result metadata.

v1.3.0

openclaw-ghost-pay 1.3.0 adds direct x402 call and settlement reporting support, enhancing real-world merchant integration. - Added bin/call-x402.mjs for making real x402 merchant endpoint calls. - Added bin/report-x402-settlement.mjs to report verified x402 payment settlements to Ghost for GhostRank. - Removed bin/pay-gate-x402.mjs; related flows are now handled by new scripts. - Updated docs (README.md, QUICKSTART.md, SKILL.md) to cover new x402 flow and reporting. - Expanded environment variables for agent/endpoint config and settlement use cases. - Updated dependency instructions for newer viem requirement.

v1.2.3

**GhostWire direct escrow flow improvements and documentation updates.** - Updated documentation for clarity, including changes to GhostWire flow (now quote/prepare/status). - Added `GHOSTWIRE_APPROVAL_MODE` environment variable. - GhostWire quote script now requires `--client` argument. - Adjusted safe usage rules; removed logging of `GHOSTWIRE_EXEC_SECRET`. - Various docstring and help text updates for improved accuracy.

v1.2.2

- Bumped version to 1.2.2. - Updated documentation in INSTALL.md, README.md, and SKILL.md. - No changes to core functionality.

v1.2.1

**Skill now ships as a bundled package with helper scripts and improved environment documentation.** - Added 11 new files, including helper scripts for key GhostPay and GhostWire flows, and new documentation (INSTALL.md, QUICKSTART.md, README.md). - Updated SKILL.md with concise usage instructions, explicit environment variable requirements, and safer usage guidelines. - Helper binaries can now be invoked from the installed base directory using `{baseDir}`. - Metadata updated to specify dependencies, supported OS, and primary environment variables. - Emphasizes separation of Express (simple payments) and Hosted GhostWire (escrow job) flows.

v1.1.0

Changelog: v1.1.0 - Added GhostWire MCP helper wrappers: - get-wire-quote - get-wire-job-status - Kept Express mode (GhostGate x402 + EIP-712) as full executable flow. - Clarified scope: Wire mode in this skill is quote/status helper level only (no direct on-chain escrow execution). - Updated docs: README, INSTALL, QUICKSTART, SKILL instructions. SKILL.md (root of uploaded folder) Required env GHOST_SIGNER_PRIVATE_KEY (required for Express paid calls) Optional env GHOST_OPENCLAW_BASE_URL=https://ghostprotocol.cc GHOST_OPENCLAW_CHAIN_ID=8453 GHOST_OPENCLAW_TIMEOUT_MS=15000 GHOSTWIRE_PROVIDER_ADDRESS=0x... GHOSTWIRE_EVALUATOR_ADDRESS=0x... GHOSTWIRE_PRINCIPAL_AMOUNT=1000000

Metadata

Slug openclaw-ghost-pay

Version 1.5.0

License MIT-0

All-time Installs 0

Active Installs 0

Total Versions 7

Frequently Asked Questions

What is Ghost Protocol OpenClaw Pay?

Discover Ghost payment requirements, execute real x402 calls, report x402 settlements, and run GhostWire quote/prepare/status flows for direct escrow. It is an AI Agent Skill for Claude Code / OpenClaw, with 302 downloads so far.

How do I install Ghost Protocol OpenClaw Pay?

Run "/install openclaw-ghost-pay" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Ghost Protocol OpenClaw Pay free?

Yes, Ghost Protocol OpenClaw Pay is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Ghost Protocol OpenClaw Pay support?

Ghost Protocol OpenClaw Pay is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin, linux, win32).

Who created Ghost Protocol OpenClaw Pay?

It is built and maintained by ghostprotoinfra (@ghostprotoinfra); the current version is v1.5.0.

More Skills