← 返回 Skills 市场
d9m1n1c

Payments & Banking

作者 D9m1n1c · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
329
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install aiotnetwork-payments-banking
功能描述
Fund wallets, transfer money, send remittances, and convert currencies. Includes top-up via multiple payment methods and international money transfers.
使用说明 (SKILL.md)

Payments & Banking

Use this skill when the user needs to top up a wallet, send money, make international remittances, or convert currencies.

Configuration

The default API base URL is https://payment-api-dev.aiotnetwork.io. All endpoints are relative to this URL.

To override (e.g. for local development):

export AIOT_API_BASE_URL="http://localhost:8080"

If AIOT_API_BASE_URL is not set, use https://payment-api-dev.aiotnetwork.io as the base for all requests.

Available Tools

  • get_balance — Get current account balance | GET /api/v1/bank/balance | Requires auth
  • get_masterpay_balance — Get MasterPay main wallet balance | GET /api/v1/masterpay/balance | Requires auth
  • list_card_wallets — List all MasterPay card wallets and balances | GET /api/v1/masterpay/wallets | Requires auth
  • get_topup_methods — Get available payment methods for top-up | GET /api/v1/bank/topup/payment_methods | Requires auth
  • get_topup_quote — Get a quote for a top-up amount | POST /api/v1/bank/topup/quote | Requires auth
  • initiate_topup — Start a top-up transaction | POST /api/v1/bank/topup | Requires auth
  • get_topup_status — Check status of a top-up | GET /api/v1/bank/topup/:id | Requires auth
  • confirm_topup — Confirm a pending top-up | POST /api/v1/bank/topup/:id/confirm | Requires auth
  • get_transfer_quote — Get a quote for a transfer | POST /api/v1/bank/transfer/quote | Requires auth
  • initiate_transfer — Start a money transfer | POST /api/v1/bank/transfer | Requires auth
  • get_transfer_status — Check status of a transfer | GET /api/v1/bank/transfer/:id | Requires auth
  • confirm_transfer — Confirm a pending transfer | POST /api/v1/bank/transfer/:id/confirm | Requires auth | Requires transaction PIN
  • get_remittance_countries — Get supported remittance destination countries | GET /api/v1/bank/transfer/remittance/countries | Requires auth
  • get_exchange_rate — Get current exchange rate for a currency pair | GET /api/v1/bank/transfer/remittance/rate | Requires auth
  • get_remittance_reference_data — Get reference data for remittance forms (banks, branches, etc.) | GET /api/v1/bank/transfer/remittance/reference-data | Requires auth
  • get_remittance_quote — Get a quote for an international remittance | POST /api/v1/bank/transfer/remittance/quote | Requires auth
  • initiate_remittance — Start an international remittance | POST /api/v1/bank/transfer/remittance | Requires auth
  • get_remittance_status — Check status of a remittance | GET /api/v1/bank/transfer/remittance/:id | Requires auth
  • get_remittance_history — Get remittance transaction history | GET /api/v1/bank/transfer/remittance/history | Requires auth
  • confirm_remittance — Confirm a pending remittance | POST /api/v1/bank/transfer/remittance/:id/confirm | Requires auth | Requires transaction PIN
  • cancel_remittance — Cancel a pending remittance | POST /api/v1/bank/transfer/remittance/:id/cancel | Requires auth
  • list_recipients — List saved remittance recipients | GET /api/v1/bank/transfer/remittance/recipients | Requires auth
  • create_recipient — Save a new remittance recipient | POST /api/v1/bank/transfer/remittance/recipients | Requires auth
  • get_recipient — Get details of a saved recipient | GET /api/v1/bank/transfer/remittance/recipients/:recipient_id | Requires auth
  • update_recipient — Update a saved recipient's details | PUT /api/v1/bank/transfer/remittance/recipients/:recipient_id | Requires auth
  • delete_recipient — Delete a saved recipient | DELETE /api/v1/bank/transfer/remittance/recipients/:recipient_id | Requires auth
  • get_conversion_pairs — Get available currency conversion pairs | GET /api/v1/bank/convert/pairs | Requires auth
  • get_conversion_rate — Get conversion rate between two currencies | GET /api/v1/bank/convert/rate | Requires auth
  • initiate_conversion — Start a currency conversion | POST /api/v1/bank/convert | Requires auth
  • confirm_conversion — Confirm a pending conversion | POST /api/v1/bank/convert/:id/confirm | Requires auth | Requires transaction PIN
  • list_transactions — List transaction history with pagination | GET /api/v1/transactions | Requires auth
  • get_transaction — Get details of a specific transaction | GET /api/v1/transactions/:id | Requires auth
  • download_receipt — Download a transaction receipt as PDF | GET /api/v1/transactions/:id/receipt/pdf | Requires auth

Recommended Flows

Top Up Wallet

Add funds to your wallet via available payment methods

  1. Get payment methods: GET /api/v1/bank/topup/payment_methods
  2. Get quote: POST /api/v1/bank/topup/quote with {amount, currency, payment_method}
  3. Initiate: POST /api/v1/bank/topup with quote details
  4. Confirm: POST /api/v1/bank/topup/:id/confirm

Send Remittance

Send money internationally to a recipient

  1. Check countries: GET /api/v1/bank/transfer/remittance/countries
  2. Get exchange rate: GET /api/v1/bank/transfer/remittance/rate?from=USD&to=PHP
  3. Create or select recipient: POST/GET /api/v1/bank/transfer/remittance/recipients
  4. Get quote: POST /api/v1/bank/transfer/remittance/quote
  5. Initiate: POST /api/v1/bank/transfer/remittance
  6. Confirm: POST /api/v1/bank/transfer/remittance/:id/confirm (requires transaction PIN)

Rules

  • All financial operations require authentication
  • Top-ups and transfers follow a quote-then-confirm pattern — never skip the quote step
  • Transfer, remittance, and conversion confirmations require a transaction PIN — top-up confirmations do not
  • Remittances require a saved recipient — create one first if needed
  • Exchange rates are indicative and may change between quote and confirmation
  • Transaction history is paginated — use page and page_size query parameters

Agent Guidance

Follow these instructions when executing this skill:

  • Always follow the documented flow order. Do not skip steps.

  • If a tool requires authentication, verify the session has a valid bearer token before calling it.

  • If a tool requires a transaction PIN, ask the user for it fresh each time. Never cache or log PINs.

  • Never expose, log, or persist secrets (passwords, tokens, full card numbers, CVVs).

  • If the user requests an operation outside this skill's scope, decline and suggest the appropriate skill.

  • If a step fails, check the error and follow the recovery guidance below before retrying.

  • All financial operations follow a quote-then-confirm pattern. Always get a quote first — never skip directly to initiation.

  • Transfer, remittance, and conversion confirmations require a transaction PIN. Top-up confirmations do not require a PIN.

  • Remittances require a saved recipient. Create one with create_recipient if none exists.

  • Exchange rates shown in quotes are indicative. The final rate is locked at confirmation.

  • Transaction history is paginated. Use page and page_size query parameters.

安全使用建议
Do not install or use this skill without clarification. Before trusting it, ask the skill author for: (1) the authentication scheme and exact environment variables or OAuth flow the skill requires (API key name, token header, scopes), (2) how transaction PINs are expected to be provided and whether they will be stored or transmitted, (3) confirmation that the default base URL is not a development/testing host for real money, and (4) an identifiable source/homepage and security/privacy policy. If you plan to test, use a sandbox account and a non-production endpoint, and never provide real credentials or PINs until you confirm secure handling (TLS, no logging of secrets, explicit user prompts for transaction consent). The current manifest is internally inconsistent (URL used as 'primary credential', no auth variables) which is a red flag.
功能分析
Type: OpenClaw Skill Name: aiotnetwork-payments-banking Version: 1.0.1 The skill bundle defines a set of banking and payment tools for an AI agent to interact with the AIOT Network API. The instructions in SKILL.md include security-conscious guidance, such as requiring fresh transaction PINs for every operation and explicitly forbidding the caching or logging of secrets. No malicious code, data exfiltration patterns, or harmful prompt injections were identified.
能力评估
Purpose & Capability
The skill's stated purpose is payments and banking (funding wallets, transfers, remittances). That purpose reasonably requires authentication and secret credentials (API keys, OAuth tokens, or user credentials) and safe handling of transaction PINs. The manifest only requests AIOT_API_BASE_URL (a URL) and nothing that looks like an auth credential. Marking a base URL as the 'primary credential' is incorrect and inconsistent with the declared capability.
Instruction Scope
SKILL.md lists many endpoints and repeatedly notes 'Requires auth' and 'Requires transaction PIN' for confirmation steps, but it gives no instructions for how to obtain or provide authentication tokens, how to pass credentials in requests, or how the agent should collect/handle a user's transaction PIN. The skill defaults to a development host (https://payment-api-dev.aiotnetwork.io) which is unusual for production payment flows and may be inappropriate for real funds. Overall the runtime instructions do not stay within a clear, safe boundary because they omit how to authenticate and secure sensitive inputs.
Install Mechanism
Instruction-only skill with no install spec and no code files. This minimizes the attack surface because nothing is downloaded or written at install time.
Credentials
Only AIOT_API_BASE_URL is declared as a required environment variable. A payments skill normally needs at minimum an API key, client ID/secret, or OAuth config and a secure way to supply a transaction PIN. The absence of any declared secret environment variables (API_KEY, AUTH_TOKEN, etc.) is disproportionate and inconsistent with the operations described.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent system-wide presence. No evidence it modifies other skills or system configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install aiotnetwork-payments-banking
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /aiotnetwork-payments-banking 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added configuration instructions for setting the API base URL with the AIOT_API_BASE_URL environment variable. - Documented the default API endpoint and how to override it for local development. - Added metadata indicating required environment variables for the skill. - No changes to endpoints or functional flows; documentation updates only.
v1.0.0
Initial release of the Payments & Banking skill. - Enables wallet funding, money transfers, remittances, and currency conversion. - Supports top-up via multiple payment methods and international money transfers. - Provides a comprehensive set of APIs for balances, quotes, initiation, confirmation, and transaction history. - Includes strict flows and security rules (quote-then-confirm, PIN requirements, secrets management). - Agent guidance emphasizes following flow order and handling authentication and sensitive data securely.
元数据
Slug aiotnetwork-payments-banking
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Payments & Banking 是什么?

Fund wallets, transfer money, send remittances, and convert currencies. Includes top-up via multiple payment methods and international money transfers. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 329 次。

如何安装 Payments & Banking?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install aiotnetwork-payments-banking」即可一键安装,无需额外配置。

Payments & Banking 是免费的吗?

是的,Payments & Banking 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Payments & Banking 支持哪些平台?

Payments & Banking 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Payments & Banking?

由 D9m1n1c(@d9m1n1c)开发并维护,当前版本 v1.0.1。

💬 留言讨论