← Back to Skills Marketplace
603
Downloads
2
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install reva
Description
Complete Reva wallet management - passwordless authentication, PayID name claiming, multi-chain crypto transfers to PayIDs or wallet addresses, balance track...
Usage Guidance
This skill appears to do what it says: it will send your email/OTP and transaction requests to https://api.revapay.ai and store an access token and small state under ~/.openclaw/payid. Before installing: 1) Confirm you trust revapay.ai and its privacy/security practices (this skill sends sensitive auth and transaction data to that domain). 2) Ensure jq and curl are available. 3) Be careful when authorizing transfers — verify recipient and amount because blockchain transfers are irreversible. 4) Note the token is stored on disk (auth.json) with restrictive permissions; if you share a machine, consider whether that storage is acceptable. 5) If you need higher assurance, review the remote service's docs or contact the vendor to confirm endpoints and behavior.
Capability Analysis
Type: OpenClaw Skill
Name: reva
Version: 0.1.5
The OpenClaw AgentSkills bundle for Reva wallet management appears benign. The `SKILL.md` documentation clearly outlines the skill's purpose, authentication flow, and security measures, emphasizing explicit user control for all sensitive operations, especially fund transfers. Critically, the shell scripts consistently use `jq` for constructing JSON payloads from user-provided arguments, effectively preventing shell injection vulnerabilities. All network communication is directed to the legitimate `https://api.revapay.ai` endpoint via HTTPS, and sensitive files like `auth.json` are stored with restrictive permissions (`chmod 600`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's intended behavior.
Capability Assessment
Purpose & Capability
Name/description (Reva wallet management, passwordless auth, PayID, multi-chain transfers) align with the scripts and runtime instructions. All network calls are to api.revapay.ai and the scripts implement login/verify, claim payid, get-balance, get-user-info, send-message, and transfer-funds as described.
Instruction Scope
SKILL.md and scripts are focused on the wallet workflow. The skill asks for user email/OTP and stores an access token for subsequent calls; it will transmit email, OTP, token, recipient and amount to revapay.ai endpoints. It does not attempt to read unrelated system files, environment variables, or other credentials. Note: the skill stores token and some state under $HOME/.openclaw/payid and posts data to the external revapay.ai API as part of normal operation.
Install Mechanism
No install/download steps; code is instruction-only with included shell scripts. Dependencies declared (jq, curl) are reasonable for the tasks performed. No remote downloads or archives are executed by an installer.
Credentials
No environment variables or unrelated credentials are requested. The scripts write and read token/state under $HOME/.openclaw/payid (auth.json, room_state.txt) — this is proportional for storing session tokens and state. All network requests go to the service domain in the skill description.
Persistence & Privilege
always: false and the skill does not modify other skills or system-wide settings. It persists only its own state under the user's home directory (~/.openclaw/payid). Files are created with restrictive permissions (700 for dir, 600 for auth file/room state) which is appropriate for stored tokens.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install reva - After installation, invoke the skill by name or use
/reva - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.5
- Removed README.md and install.sh files.
- No user-facing features or command changes.
- Internal or documentation-related cleanup only.
v0.1.4
- Initial release with complete Reva wallet management functionality.
- Adds passwordless authentication using email-based OTP.
- Supports claiming unique PayID names.
- Enables multi-chain crypto transfers to PayIDs, Twitter usernames, or wallet addresses.
- Provides full wallet balance tracking across supported networks.
- Includes user account information, deposit management, and account detail retrieval.
- Declares dependencies on jq and curl; adds homepage and user-invocable metadata.
v0.1.3
- No user-facing or functional changes.
v0.1.2
Reva v0.1.2 is a major update introducing a new message parsing model for token transfers.
- Introduced direct parsing and extraction of token, chain, recipient, and amount for fund transfers, replacing the previous message-forwarding approach.
- Users must now specify (or answer follow-up questions about) all fields: token, chain, recipient (PayID, Twitter, or wallet address), and amount before a transfer is executed.
- Dollar/“USD” requests are now unified under a special marker (`USD_STABLECOIN`) and no longer require network selection.
- All supported tokens and chains use strict enums for processing.
- Removed the message-forwarding interface for token transfers in favor of precise field extraction and validation.
- Added enhanced follow-up logic to collect missing transfer details from users.
v0.1.1
- Improved script behavior and logic for authentication, PayID claiming, message handling, and OTP flow.
- Updated shell scripts: `auth-manager.sh`, `claim-payid.sh`, `send-message.sh`, `send-otp.sh`, and `verify-otp.sh` for robustness and reliability.
- No changes to user-facing documentation or workflows.
v1.0.0
PayID skill initial release.
- Adds passwordless authentication via email-based OTP.
- Allows users to claim a unique PayID name.
- Enables multi-chain crypto transfers using PayID names, wallet addresses or twitter handles
- Provides balance tracking across supported networks.
- Displays account details, including PayID name, wallet address, referral code, and more.
- Supports depositing funds into wallet addresses and forwarding funds using a secure AI endpoint.
Metadata
Frequently Asked Questions
What is Reva?
Complete Reva wallet management - passwordless authentication, PayID name claiming, multi-chain crypto transfers to PayIDs or wallet addresses, balance track... It is an AI Agent Skill for Claude Code / OpenClaw, with 603 downloads so far.
How do I install Reva?
Run "/install reva" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Reva free?
Yes, Reva is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Reva support?
Reva is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Reva?
It is built and maintained by redd (@pax47); the current version is v0.1.5.
More Skills