x402 Payments

Make x402 payments to access paid APIs and gated content. Use when a skill needs to fetch data from x402-gated endpoints (like Kaito mindshare API, Simmer pr...

This skill will sign and send USDC payments using whatever private key you provide. That is coherent with its purpose, but it means you should only install/run it if you trust the skill and the endpoints it will contact. Recommendations before installing: 1) Use a dedicated wallet with minimal USDC and no long-term funds (do not use your primary wallet). 2) Set a low X402_MAX_PAYMENT_USD both in env and config.json to cap accidental spend. 3) Inspect the x402 SDK package and this skill's code yourself or run it in an isolated environment. 4) Prefer testnet (set X402_NETWORK=testnet) until you confirm behavior. 5) Remove the EVM_PRIVATE_KEY from shared shells/CI and avoid persisting it in insecure places. Finally, note SKILL.md references 'simmer-sdk' even though the bundled requirements don't — that mismatch should be clarified by the publisher.

Type: OpenClaw Skill Name: simmer-x402 Version: 1.0.8 The skill facilitates automated cryptocurrency payments (USDC on Base) using the x402 protocol, which is a high-risk capability. It requires a plaintext private key (EVM_PRIVATE_KEY) and includes logic in x402_cli.py to automatically sign and send funds when encountering HTTP 402 errors. While it includes a safety cap (max_payment_usd), the x402_rpc function lacks the explicit limit check found in x402_fetch, potentially allowing higher-than-expected spending. Additionally, a custom V2HeaderTransport in x402_cli.py dynamically modifies HTTP headers based on response body content to satisfy SDK requirements, which is a sensitive manipulation of network traffic.