← Back to Skills Marketplace
1534
Downloads
4
Stars
2
Active Installs
9
Versions
Install in OpenClaw
/install paylobster
Description
Agent payment infrastructure on Base. Trustless escrow, agent treasury, token swaps, cross-chain bridges, fiat on/off ramp, on-chain identity & reputation, s...
Usage Guidance
This skill interacts with money and agent identity — do not install or give it any secret keys until you verify the provider and provenance. Questions to resolve before proceeding: (1) Where is the code hosted and who operates paylobster.com? (2) Ask the publisher to declare required environment variables and the exact flows for key management (who holds sk_live secrets, where are they stored, and is there a sandbox mode?). (3) Require manual confirmation for any fund-moving actions and test only with small amounts or a sandbox network. (4) If you plan to let the agent act autonomously, restrict its ability to sign or transmit transactions and require explicit user approval for payments. If the publisher cannot provide verifiable source, documentation, and a sandbox, treat this skill as higher risk and avoid exposing live secrets or wallets.
Capability Analysis
Type: OpenClaw Skill
Name: paylobster
Version: 4.6.0
The 'paylobster' skill bundle provides an extensive financial infrastructure for AI agents on the Base network, including tools for escrows, token swaps, and a 'CoinFlip' gambling contract. It is classified as suspicious because it requires high-privilege access (PAYLOBSTER_PRIVATE_KEY) and promotes the use of a hosted, opaque MCP server (paylobster.com/mcp/mcp), which introduces significant remote execution risks. Furthermore, the 'natural language payments' feature (natural_pay tool) creates a high-risk surface where prompt injection could potentially trigger unauthorized financial transactions.
Capability Assessment
Purpose & Capability
The skill claims to be a full payments/escrow/treasury system on Base, which legitimately requires wallets, API keys, and integration credentials; however the registry metadata lists no required env vars, no primary credential, and no install/binaries. The lack of declared credentials and absent homepage/source makes the provenance and capability claims inconsistent with what a payments integration would normally require.
Instruction Scope
SKILL.md contains concrete runtime instructions that call external endpoints (paylobster.com), create merchant API keys, perform charges, and show wallet signing flows. These instructions implicitly require handling secrets (sk_live_...), signing with wallets, and authorizing on-chain token transfers. The instructions do not limit or warn about secret handling, and they expose operations that could move funds or reveal rich agent identity data (SIWA profile endpoints that return full profiles).
Install Mechanism
Instruction-only skill with no install spec and no code files — low install-time risk because nothing is written or executed locally by an installer. The main runtime risk is network calls to an external service rather than local code execution from an untrusted download.
Credentials
The SKILL.md shows use of merchant secrets (sk_live_...), onramp/offramp, and wallet operations, but the skill declares no required environment variables or primary credential. That omission is disproportionate: a payment integration should explicitly declare needed credentials and scope. The skill also references Coinbase and third-party integrations without declaring required tokens or config paths.
Persistence & Privilege
The skill does not request always:true, does not install code, and does not declare writing to agent/system config. Autonomous invocation is allowed by default but is not combined here with any declared persistent privilege in the package metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install paylobster - After installation, invoke the skill by name or use
/paylobster - Provide required inputs per the skill's parameter spec and get structured output
Version History
v4.6.0
Bump to match published packages: SDK 4.6.0, CLI 4.6.0, MCP 1.6.0
v4.4.0
Added InvestmentTermSheet: on-chain agent-to-agent investment with revenue share, fixed return, milestone-based, and streaming return types. Investment commands across CLI, SDK, MCP. Contract deployed to Base mainnet.
v4.3.0
Added agent treasury, token swaps (0x), cross-chain bridges (Li.Fi), portfolio management. TreasuryFactory deployed to Base mainnet. 33+ MCP tools, 19 CLI commands, 16 SDK modules.
v4.2.0
V4 expansion: hosted MCP server at paylobster.com/mcp (23 tools, 6 resources, OAuth 2.1), SDK 4.1.0 (14 modules), CLI 4.1.0 (16 commands), 3 V4 contracts live on Base mainnet, streaming payments, disputes, cascading escrows, credit scoring, intent marketplace, revenue sharing, compliance, oracle verification
v4.1.0
V4 features, Discord link, all contract addresses verified, expanded SDK/CLI/MCP docs
v4.0.2
Fix Sepolia reputation address, add Discord link
v4.0.1
- Added support for the x402 protocol.
- Introduced instructions and details for the new MCP server, enabling desktop and MCP-compatible client integration.
- Updated contract addresses; mainnet contracts have changed, Sepolia reputation contract is pending deployment.
- Revised installation steps for CLI (now via npm globally) and included MCP server and SDK installation guidance.
- Clarified usage instructions and included more details on available tools and integration patterns.
- Minor description and documentation improvements throughout.
v4.0.0
V4 SDK + CLI: escrows, reputation, mandates, credit, service discovery on Base
v3.0.0
Trustless Base L2 credit + escrow + CLI onboarding
Metadata
Frequently Asked Questions
What is PayLobster?
Agent payment infrastructure on Base. Trustless escrow, agent treasury, token swaps, cross-chain bridges, fiat on/off ramp, on-chain identity & reputation, s... It is an AI Agent Skill for Claude Code / OpenClaw, with 1534 downloads so far.
How do I install PayLobster?
Run "/install paylobster" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is PayLobster free?
Yes, PayLobster is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does PayLobster support?
PayLobster is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created PayLobster?
It is built and maintained by itsGustav (@itsgustav); the current version is v4.6.0.
More Skills