← Back to Skills Marketplace
Pay Clawhub
by
pay-skill.com
· GitHub ↗
· v1.0.9
· MIT-0
90
Downloads
0
Stars
0
Active Installs
10
Versions
Install in OpenClaw
/install pay-skill
Description
USE THIS SKILL whenever the user needs any API, external service, paid resource, or wants to pay for anything. Trigger on: "I need an API", "find me a servic...
Usage Guidance
This skill appears coherent for paying third‑party APIs: it requires a locally installed 'pay' CLI and wallet config (~/.pay/config.toml) and instructs the agent to always ask you before initializing, funding, or sending payments. Before installing: verify you trust the pay-cli source (the metadata suggests installing via cargo from the project's repo), confirm you are comfortable the agent may send request bodies and headers to external services (paying an API necessarily transmits data), and treat any funding links produced as sensitive dashboard tokens (the docs state this). If you prefer tighter control, keep the CLI uninstalled until you explicitly approve and monitor all pay fund links and transaction confirmations.
Capability Analysis
Type: OpenClaw Skill
Name: pay-skill
Version: 1.0.9
The skill provides high-risk financial and networking capabilities, including the ability to send USDC on the Base network and perform arbitrary HTTP requests via the 'pay request' command (SKILL.md, references/x402.md). While the instructions mandate operator confirmation for all transactions and initialization, the 'pay request' tool presents a significant SSRF (Server-Side Request Forgery) risk, and the 'pay fund' command generates URLs that double as sensitive dashboard authentication tokens (references/funding.md). The broad trigger phrases and the 'Agent-as-relay' trust model (references/a2a.md) create a substantial attack surface for potential financial exploitation or unauthorized data access.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description (agent payment engine for paying APIs/services) match the declared requirements: the 'pay' CLI binary and ~/.pay/config.toml wallet are exactly what a payment skill needs. No unrelated credentials or binaries are requested.
Instruction Scope
Instructions confine the agent to the 'pay' CLI and require operator confirmation before init/funding/payments. They do instruct probing arbitrary URLs via 'pay request' (expected for discovering paywalled APIs) which will cause network I/O to third-party services and the Pay facilitator (pay-skill.com). This is expected for the stated purpose but means user data and request payloads may be sent to external services when paying.
Install Mechanism
This is instruction-only; no install spec is executed automatically. The metadata suggests 'cargo install pay-cli' as an installation path which is a plausible delivery mechanism. No downloaded archives or opaque URLs are required by the skill itself.
Credentials
No environment variables or unrelated secrets are requested. The single config path (~/.pay/config.toml) is proportionate for a local wallet. Note: 'pay fund' returns a funding URL that doubles as a dashboard auth token; the docs explicitly mark that as sensitive and require operator handling.
Persistence & Privilege
Skill is not always-on and does not request elevated agent-wide privileges. It does require the local pay CLI/config to exist, which is appropriate for wallet operations. The SKILL.md explicitly forbids automatic init/install and requires operator confirmation for fund links and payments.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pay-skill - After installation, invoke the skill by name or use
/pay-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.9
Restore v1.0.6 references (operator-confirmation posture). Add discover-then-request inline flow. Broader trigger phrases. No safety posture changes from v1.0.6.
v1.0.8
Restore operator-confirmation guardrails for ClawHub safety scan: require confirmation for all payments, no auto-install/init, no auto-pay under threshold
v1.0.7
Add discover-then-request inline flow, broader trigger phrases, sync references
v1.0.6
Add install spec for pay CLI binary only (cargo install pay-cli). No pay init — wallet initialization remains operator-confirmed per SKILL.md instructions.
v1.0.5
Remove install spec (contradicted operator-confirmation instructions). Remove env vars from requires (PAYSKILL_KEY is optional, not required). Keep only bins and config path declarations.
v1.0.4
Restore transparent x402 tab handling (pay request manages tabs internally). Remove manual tab-open examples. Fix stale 30-day auto-close reference.
v1.0.3
Fix metadata mismatch: declare env vars (PAYSKILL_KEY, PAYSKILL_TESTNET), config paths (~/.pay/), required bins (pay), and install spec in metadata.openclaw schema. References consistent with operator-confirmation model.
v1.0.2
Fix contradictions: all references now consistent with operator-confirmation model. No auto-install, no auto-spend, no auto-tab-open. Fund links treated as sensitive. Removed autonomous provider outreach.
v1.0.1
Address security scanner flags: require preinstalled CLI (no auto-install), declare wallet credentials in metadata, all payments require operator confirmation, fund link sharing requires approval.
v1.0.0
Initial publish: USDC payments on Base via CLI. Direct, tab, x402 primitives. Service discovery.
Metadata
Frequently Asked Questions
What is Pay Clawhub?
USE THIS SKILL whenever the user needs any API, external service, paid resource, or wants to pay for anything. Trigger on: "I need an API", "find me a servic... It is an AI Agent Skill for Claude Code / OpenClaw, with 90 downloads so far.
How do I install Pay Clawhub?
Run "/install pay-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pay Clawhub free?
Yes, Pay Clawhub is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pay Clawhub support?
Pay Clawhub is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pay Clawhub?
It is built and maintained by pay-skill.com (@pay-skill); the current version is v1.0.9.
More Skills