← Back to Skills Marketplace
Skill Openclaw
by
fluxaventures
· GitHub ↗
· v1.0.4
· MIT-0
170
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install skill-openclaw
Description
Give your OpenClaw agent the power to spend. Stablecoin payments, spending policies, and compliance — built-in.
Usage Guidance
This skill appears to implement the described payments and compliance features and asks only for the Oris API credentials it needs. Before installing: 1) Confirm you trust useoris.finance / Fluxa Ventures (the skill will use your API key/secret to move funds). 2) Be aware the setup writes your API key and secret into ~/.openclaw/config.json in plaintext — restrict file permissions, consider using short‑lived or restricted keys, and rotate them after testing. 3) The skill runs a local MCP server that will hold credentials in memory and accept tool calls from the agent; ensure only trusted agents/clients can talk to it and set conservative spending limits (default policy is $50/tx, $200/day). 4) The package depends on a Node CLI (setup) and Python server; verify dependencies (e.g., oris-sdk) and inspect the included package.json/pyproject if you need higher assurance. If you require more assurance, ask the maintainer for a signed release, a minimal install recipe, or run the setup in a restricted environment first.
Capability Analysis
Type: OpenClaw Skill
Name: skill-openclaw
Version: 1.0.4
The Oris skill provides a legitimate payment and financial management infrastructure for OpenClaw agents, facilitating stablecoin transactions and KYA (Know Your Agent) verification. The code implements standard security practices, including HMAC-SHA256 request signing for API calls to 'api.useoris.finance' and a fail-closed usage gate to enforce spending limits. Credentials and configuration are stored locally in the standard '~/.openclaw/config.json' directory, and no evidence of data exfiltration, malicious execution, or harmful prompt injection was found across the TypeScript onboarding logic or the Python MCP server implementation.
Capability Assessment
Purpose & Capability
Name/description (OpenClaw payments, KYA, spending policies) match the files and runtime behavior. The skill exposes payment, balance, marketplace and attestation tools and requires ORIS_API_KEY, ORIS_API_SECRET, and ORIS_AGENT_ID which are exactly the credentials needed for a payments API.
Instruction Scope
SKILL.md and code instruct the agent to run a local MCP server (python -m oris_mcp.server) and a setup flow that registers the agent and writes credentials to ~/.openclaw/config.json. This is within the stated payment scope, but the skill explicitly persists the API key/secret to disk (OpenClaw config) and the MCP server holds the credentials in memory to sign requests — that persistence is expected for this skill but is a sensitive action users should be aware of.
Install Mechanism
No external arbitrary download URLs or extract/install from untrusted hosts are present. All necessary code is included in the package (Python and JS artifacts plus packaging metadata). The SKILL.md frontmatter contains an 'install' entry (kind: uv path: .) which is slightly unusual/ambiguous but not evidence of an external fetch. Overall install footprint appears local and self-contained.
Credentials
The skill requests only ORIS_API_KEY, ORIS_API_SECRET, and ORIS_AGENT_ID — these are appropriate and necessary for signing and identifying payments. No unrelated secrets are requested. Caveat: the API secret is written in cleartext to ~/.openclaw/config.json by the provided CLI code; storing long‑lived secrets on disk increases exposure risk and should be considered when authorizing the skill.
Persistence & Privilege
always: false and default autonomous invocation are set. The skill runs a local MCP server process (expected for exposing tools to the agent) and writes its own config under the 'oris' key of the shared OpenClaw config file; it does not modify other skills' config keys. No elevated 'always' privilege or evidence of modifying unrelated agent/system settings was found.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-openclaw - After installation, invoke the skill by name or use
/skill-openclaw - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Removed all TypeScript source files and related test files; Node.js service functionality is no longer included in this package.
- Refined setup instructions in documentation to clarify credential usage for API authentication.
- Updated SKILL.md to align with the new, Python-only structure.
v1.0.3
- Added ORIS_AGENT_ID as a required environment variable for improved agent identification.
- Updated metadata to include ORIS_AGENT_ID in both requirements and server environment configuration.
- Bumped version to 1.0.3.
v1.0.1
- Added new Python-based server components for Oris MCP integration.
- Updated environment requirements; ORIS_AGENT_ID is no longer required.
- node binary is now also listed as required.
- Installation now uses a local path instead of a remote package.
- Minor updates to configuration and metadata for improved compatibility.
v1.0.0
Initial release of Oris for OpenClaw
- Adds stablecoin payment capabilities, programmable spending policies, and compliance checks to OpenClaw agents.
- Provides non-custodial wallets with KYA (Know Your Agent) verification and cross-chain asset support.
- Enables sending and receiving USDC, USDT, and EURC on multiple networks, with built-in audit logging and compliance.
- Includes tools for payments, balance checks, spending summaries, service marketplace, fiat on/off-ramp, and ZKP attestations.
- Default spending limits and customizable policies enforced for every transaction.
- Comprehensive documentation and support available.
Metadata
Frequently Asked Questions
What is Skill Openclaw?
Give your OpenClaw agent the power to spend. Stablecoin payments, spending policies, and compliance — built-in. It is an AI Agent Skill for Claude Code / OpenClaw, with 170 downloads so far.
How do I install Skill Openclaw?
Run "/install skill-openclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Openclaw free?
Yes, Skill Openclaw is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Openclaw support?
Skill Openclaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Openclaw?
It is built and maintained by fluxaventures (@fluxaventures); the current version is v1.0.4.
More Skills