← Back to Skills Marketplace
seanlan

PayTheFlyPro

by paythefly · GitHub ↗ · v1.0.8
cross-platform ✓ Security Clean
675
Downloads
2
Stars
0
Active Installs
9
Versions
Install in OpenClaw
/install paythefly
Description
Create crypto payment & withdrawal links for your app. Works with BSC, Ethereum, TRON. Users pay via PayTheFlyPro gateway - you get shareable URLs with built...
Usage Guidance
This skill appears to do what it says: generate signed payment and withdrawal links. Before installing or using it, do the following: 1) Only set PTF_SIGNER_KEY for a dedicated signer wallet that holds no funds; never reuse a main wallet key. 2) Run `npm install` in a controlled environment and review package versions (ethers/tronweb) to reduce dependency supply-chain risk. 3) Verify the PayTheFlyPro homepage and the skill owner if you don't already trust the source. 4) Prefer supplying PTF_CUSTOM_RPC that you control (or your own RPC) for queries to avoid leaking serial numbers to third-party RPC providers. 5) Store environment variables securely (avoid exposing them in shared shells or logs). If you want higher assurance, audit the included scripts and try them locally with a throwaway signer key first.
Capability Analysis
Type: OpenClaw Skill Name: paythefly Version: 1.0.8 The skill is designed to generate signed crypto payment and withdrawal links, a function that inherently requires handling a private key (`PTF_SIGNER_KEY`). The `SKILL.md` documentation explicitly addresses this high-risk operation with a 'Security Notice,' advising users to use a dedicated, unfunded wallet for signing, which demonstrates an awareness of security and a lack of malicious intent. The code in `scripts/payment.mjs`, `scripts/withdrawal.mjs`, and `scripts/query.mjs` uses standard crypto libraries (`ethers`, `tronweb`) to interact with legitimate blockchain RPCs and the `pro.paythefly.com` service, without any evidence of data exfiltration, unauthorized execution, persistence mechanisms, obfuscation, or prompt injection attempts against the AI agent. All operations are aligned with the stated purpose.
Capability Assessment
Purpose & Capability
Name/description match the code and runtime instructions: scripts create EIP-712/TIP-712 signatures and build PayTheFlyPro URLs; required binaries (node/npm) and env vars (project id, contract address, signer key, chain id) are appropriate for this functionality.
Instruction Scope
SKILL.md instructs to run the included scripts and to npm install ethers and tronweb. The instructions only read the declared env vars and do not ask the agent to read unrelated files or exfiltrate arbitrary data. Query script contacts blockchain RPCs (expected for status checks).
Install Mechanism
No formal install spec (instruction-only) but SKILL.md directs running `npm install ethers tronweb`. That is a normal dependency install for these scripts; user should vet package versions before installing to limit supply-chain risk.
Credentials
The skill requires PTF_SIGNER_KEY (private key) plus project/contract identifiers and chain id. Requiring a signer private key is expected for producing signatures, but this is a highly sensitive secret—the SKILL.md recommends a dedicated zero-funds signer which is appropriate and should be followed.
Persistence & Privilege
Skill is user-invocable, not always-enabled, and does not request any persistent or system-level privileges. It does not modify other skills or system config.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install paythefly
  3. After installation, invoke the skill by name or use /paythefly
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.8
Complete package with all files
v1.0.7
Ensure all files included: SKILL.md, payment.mjs, withdrawal.mjs, query.mjs
v1.0.6
Ensure all files included: SKILL.md, payment.mjs, withdrawal.mjs, query.mjs
v1.0.5
Fix query.mjs: use correct contract function names (isPaymentSerialNoUsed, isWithdrawalSerialNoUsed) and string parameter type
v1.0.4
Fix security scan issues: remove unused PTF_SIGNER_ADDRESS, add npm dependencies installation guide
v1.0.3
Improve description for better user understanding
v1.0.2
Add security notice about using dedicated signer wallet
v1.0.1
Remove unnecessary development files
v1.0.0
Initial release of paythefly skill. - Create payment and withdrawal links for PayTheFlyPro crypto payments. - Supports BSC, Ethereum, and TRON networks. - Includes CLI scripts for payment, withdrawal, and order status queries. - Customizable options for amount, tokens, redirect URLs, branding, language, and signature expiry. - Detailed environment variable and supported chain documentation.
Metadata
Slug paythefly
Version 1.0.8
License
All-time Installs 0
Active Installs 0
Total Versions 9
Frequently Asked Questions

What is PayTheFlyPro?

Create crypto payment & withdrawal links for your app. Works with BSC, Ethereum, TRON. Users pay via PayTheFlyPro gateway - you get shareable URLs with built... It is an AI Agent Skill for Claude Code / OpenClaw, with 675 downloads so far.

How do I install PayTheFlyPro?

Run "/install paythefly" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is PayTheFlyPro free?

Yes, PayTheFlyPro is completely free (open-source). You can download, install and use it at no cost.

Which platforms does PayTheFlyPro support?

PayTheFlyPro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created PayTheFlyPro?

It is built and maintained by paythefly (@seanlan); the current version is v1.0.8.

💬 Comments