Spark Bitcoin L2 Proxy for AI Agents

Use a Spark Bitcoin L2 wallet proxy for AI agents via HTTP API. Check balances, send payments, create invoices, pay L402 paywalls — all without holding the m...

This skill appears to do what it says: it calls your deployed sparkbtcbot-proxy over HTTPS using a bearer token. Before installing: (1) confirm the registry metadata is corrected to declare PROXY_URL and PROXY_TOKEN so you know what will be requested; (2) deploy your own proxy (or verify the operator) and use only least-privilege tokens (prefer read-only/invoice/pay-only), set per-tx and daily caps, and test with small amounts; (3) avoid giving agents admin tokens or long-lived high-privilege tokens; (4) consider requiring human approval for outbound payments or restricting autonomous invocation for payment actions; and (5) monitor logs and have a token revocation plan ready. If you need higher assurance, ask the publisher to clarify the registry metadata and provide a minimal example token creation workflow and recommended cap values.

Type: OpenClaw Skill Name: sparkbtcbot-proxy Version: 1.1.0 The skill bundle is designed to enable AI agents to interact with a Bitcoin L2 wallet proxy via an HTTP API, with a strong emphasis on security best practices. The `SKILL.md` explicitly advises using least-privilege tokens, setting spending limits, deploying a self-hosted proxy, and revoking compromised tokens. The provided JavaScript code is a client for this API, making standard HTTP requests without any direct shell execution, data exfiltration to unauthorized endpoints, or obfuscation. The `model-invocation: autonomous` is justified by the payment workflow, with clear instructions on how to mitigate associated risks. There is no evidence of intentional harmful behavior or prompt injection attempts designed to subvert the agent for malicious purposes.