← Back to Skills Marketplace
fozagtx

coclaw

by fawuzan · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ Security Clean
93
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install coclaw
Description
List and buy AI services on Coclaw. Sellers create listings. Buyers call the supplier endpoint with x402 payment and get results in the response.
README (SKILL.md)

Coclaw

  • Seller: create a listing on the directory
  • Buyer: browse listings, call the supplier endpoint with x402, get the result

Defaults

  • API: https://coclawapi-production.up.railway.app
  • Agent: https://coclawagent-production.up.railway.app/task
  • Network: stellar:testnet
  • Token: USDC (CBIELTK6YBZJU5UP2WWQEUCYKLPU6AUNZ2BQ4WWFEIE3USCIHMXQDAMA)
  • Facilitator: https://www.x402.org/facilitator

Scripts

  • scripts/create_listing.py — create a seller listing
  • scripts/call_service.py — browse listings and call a service

Sell-Side

python3 scripts/create_listing.py \
  --name "Research Agent" \
  --description "Produces market research summary" \
  --price-usdt "1.5"
python3 scripts/create_listing.py --dry-run

Buy-Side

List available services:

python3 scripts/call_service.py --list

Call a service:

python3 scripts/call_service.py \
  --service-id "svc_ai_summarizer" \
  --input-json '{"text":"Long document here","max_points":5}'

Dry-run (show listing without calling):

python3 scripts/call_service.py --service-id "svc_code_reviewer" --dry-run

How It Works

  1. Buyer calls the supplier endpoint
  2. x402 middleware returns 402 with payment requirements
  3. Buyer signs Soroban auth entry, facilitator settles USDC on-chain
  4. Request passes through, supplier runs inference, returns result in 200

Pay and get the result. No API keys, no order lifecycle, no callbacks.

Security

  • Fixed API base URL and agent URL — no overrides
  • Endpoint locked to Coclaw agent — no SSRF

Error Rules

  • If no active listing and no service-id, fail with clear message
  • Surface exact server error messages
  • If x402 payment fails, tell user to use an x402-enabled client
Usage Guidance
This skill appears to do what it says: list and call Coclaw services. Before running it, review and accept the privacy/operational implications: the scripts will send your input payloads to third-party endpoints hosted on railway.app and rely on an external x402 facilitator to settle payments. Do not send sensitive secrets or private data as inputs. Use the provided --dry-run flags to inspect payloads and listings before attempting a paid call. If you plan to use it in production, verify the authenticity of the API/agent/facilitator URLs and consider running calls on testnet first (the SKILL.md mentions Stellar testnet). Finally, note the small path/name mismatch (openclaw vs coclaw) in the code — you may want to double-check the listings endpoint is the correct one for your deployment.
Capability Analysis
Type: OpenClaw Skill Name: coclaw Version: 1.0.1 The skill bundle provides a legitimate interface for the Coclaw marketplace, allowing users to list and purchase AI services using the x402 payment protocol on the Stellar network. The scripts `scripts/call_service.py` and `scripts/create_listing.py` perform standard HTTP requests to a specified API (coclawapi-production.up.railway.app) to manage service listings and facilitate service calls. The code does not contain any evidence of data exfiltration, malicious execution, or obfuscation, and its behavior is entirely consistent with the stated purpose in `SKILL.md`.
Capability Tags
cryptorequires-walletcan-make-purchases
Capability Assessment
Purpose & Capability
Name/description match the included scripts and SKILL.md. The two Python scripts implement seller (create_listing) and buyer (call_service) flows, use fixed Coclaw API/agent endpoints, and do not request unrelated OS binaries, environment variables, or credentials.
Instruction Scope
Runtime instructions are narrow and describe contacting the fixed Coclaw API/agent endpoints and using x402 payment. This inherently sends user-provided payloads to external services (railway.app-hosted endpoints and an x402 facilitator). That is expected for this skill but is a privacy/operational risk — do not send sensitive secrets in inputs. Minor inconsistency: fetch_listings calls /v1/openclaw/listings while create_listing posts to /v1/services; this is likely a naming/path mismatch but not clearly malicious.
Install Mechanism
No install spec or external downloads; the skill is instruction-only with two local Python scripts. Nothing is written to disk or fetched during installation by the skill itself.
Credentials
The skill requires no environment variables, no secret keys, and declares no primary credential. Defaults (USDC token id, default supplier public key, API URLs) are baked into code/markdown rather than requested as secrets — consistent with the skill's purpose.
Persistence & Privilege
The skill does not request permanent presence (always:false), does not modify other skills or system-wide config, and does not persist credentials. It only makes outbound requests when run.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install coclaw
  3. After installation, invoke the skill by name or use /coclaw
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Major update: Buy-side automation now uses a unified call method instead of order creation. - Added scripts/call_service.py for buyers to browse and call AI services directly. - Removed scripts/create_order.py and the order creation flow. - Buyers now interact with listings using x402 payment and receive the result in the response, with no order lifecycle management. - Simplified documentation: clear seller/buyer instructions and sample commands. - Security rules enforced for fixed API endpoints and no URL overrides.
v1.0.0
coclaw 3.0.0 is a major update introducing automated buy/sell workflows and end-to-end integration with OpenClaw and Coclaw APIs. - Adds automated seller listing creation and buyer order creation via scripts (`create_listing.py`, `create_order.py`) - Introduces support for x402-based USDC payments on Stellar testnet - Details the active listings, default configs, and output structure for flows - Provides improved error handling, transaction proof links, and status polling - Disables manual API URL overrides to enhance security and trust in automated execution
Metadata
Slug coclaw
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is coclaw?

List and buy AI services on Coclaw. Sellers create listings. Buyers call the supplier endpoint with x402 payment and get results in the response. It is an AI Agent Skill for Claude Code / OpenClaw, with 93 downloads so far.

How do I install coclaw?

Run "/install coclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is coclaw free?

Yes, coclaw is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does coclaw support?

coclaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created coclaw?

It is built and maintained by fawuzan (@fozagtx); the current version is v1.0.1.

💬 Comments