← 返回 Skills 市场
kirch

Clawpay

作者 kirch · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1782
总下载
1
收藏
2
当前安装
2
版本数
在 OpenClaw 中安装
/install clawpay
功能描述
Payment requests and delivery for AI agents and humans.
使用说明 (SKILL.md)

Clawpay Delivery Skill (Hybrid)

This skill provides a minimal flow to create a paid request, collect payment, and deliver a result. Use it for any agent-to-agent or human-to-agent exchange.

PAY_TO: pass the receiving wallet address when creating a request (pay_to). Default PAY_TO rule: you can set a default receiving address in skill.json so the sender doesn't need to provide one each time.

Skill Files

File URL
SKILL.md (this file) https://clawpay.ai/skill.md
HEARTBEAT.md https://clawpay.ai/heartbeat.md
package.json (metadata) https://clawpay.ai/skill.json

Install locally:

mkdir -p ~/.openclaw/skills/clawpay
curl -s https://clawpay.ai/skill.md > ~/.openclaw/skills/clawpay/SKILL.md
curl -s https://clawpay.ai/heartbeat.md > ~/.openclaw/skills/clawpay/HEARTBEAT.md
curl -s https://clawpay.ai/skill.json > ~/.openclaw/skills/clawpay/package.json

Receiver: create a payment request

curl -X POST https://clawpay.ai/v1/requests \
  -H "Content-Type: application/json" \
  -d '{"amount":"5","currency":"USDC","description":"Run analysis skill","pay_to":"\x3Cpay_to>"}'

Response:

{
  "request_id": "\x3Crequest_id>",
  "pay_url": "https://clawpay.ai/pay/\x3Crequest_id>",
  "status": "pending"
}

Save request_id and pay_url.

Receiver: send the pay link

Forward pay_url to whoever needs to complete payment.

Payer: how to pay

Open the pay_url in a browser and complete payment with a crypto wallet.

Check payment status (polling, optional)

curl https://clawpay.ai/v1/requests/\x3Crequest_id>

If status is paid, deliver.

Receiver: deliver the result (optional)

curl -X POST https://clawpay.ai/v1/requests/\x3Crequest_id>/deliver \
  -H "Content-Type: application/json" \
  -d '{"payload":"\x3Cpayload>"}'

If unpaid, the server will return HTTP 402 and x402 payment headers.

安全使用建议
This skill appears to implement the payment-request flow it advertises, but before installing or using it you should: (1) verify that https://clawpay.ai is a legitimate operator (corporate identity, docs, privacy policy, and contact/support), (2) confirm the API’s authentication model — why are no API keys required and is anonymous request creation intended, (3) avoid sending sensitive or confidential data as the 'payload' delivered to the service unless you have explicit assurances about encryption, retention, and usage, (4) review any files you download via the provided curl commands before executing or trusting them, and (5) consider testing in an isolated environment or sandbox first. If the maintainer can show that the service requires per-account authentication (API keys or similar) and documents data handling/retention, my confidence would increase and concerns about data exfiltration would be reduced.
功能分析
Type: OpenClaw Skill Name: clawpay Version: 1.0.1 The OpenClaw AgentSkills skill bundle 'clawpay' is designed for payment requests and delivery, interacting with the `https://clawpay.ai` API. All network calls are directed to this domain and are consistent with the skill's stated purpose. While the `SKILL.md` includes instructions to download the skill's own components (SKILL.md, HEARTBEAT.md, package.json) from `https://clawpay.ai` for local installation, this is a common distribution method and does not involve executing arbitrary remote code. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's core behavior.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The name and description (payment requests and delivery) align with the runtime instructions: create a request, give payer a pay_url, poll status, and POST a delivery payload. The package.json default_pay_to is consistent with the described 'default pay_to' behavior.
Instruction Scope
SKILL.md instructs agents/users to POST/GET to https://clawpay.ai endpoints and to POST arbitrary 'payload' to /requests/<id>/deliver. That is within the stated payment/delivery scope, but it explicitly directs transmission of result payloads to a third-party service without any guidance about what data is safe to send, and without any mention of authentication, encryption beyond HTTPS, or data retention/usage. The install snippet also instructs curl from the remote domain into ~/.openclaw/skills/clawpay which writes remote content to disk — expected for an install but potentially risky if the domain is untrusted.
Install Mechanism
This is instruction-only (no install spec). The SKILL.md includes example local-install commands that curl files from https://clawpay.ai into ~/.openclaw/skills/clawpay. Downloading files from the vendor domain is typical, but the domain is a third party (not a well-known package host) so users should verify the source before running those curl commands.
Credentials
The skill requests no environment variables or credentials. While minimal privileges can be good, a payments API that allows creating requests, polling status, and delivering payloads with no declared authentication is unusual and worth questioning. The lack of required credentials could indicate a public anonymous endpoint (design choice) — or it could be an omission in the documentation. Either way, it increases the risk that anyone (or a compromised agent) could create or fulfill requests or exfiltrate data to the service.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide configuration changes, and has no code files that modify other skills. No elevated persistence or cross-skill config changes are requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawpay
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawpay 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Marked checking payment status (polling) as optional in documentation. - No functional or code changes; documentation update only.
v1.0.0
- Initial release of Clawpay skill (version 1.0.0) - Supports creating, sending, and tracking payment requests for agents and humans - Enables delivery of results upon payment completion - Includes API usage examples and configuration for default receiving address - Plain installation instructions provided
元数据
Slug clawpay
版本 1.0.1
许可证
累计安装 2
当前安装数 2
历史版本数 2
常见问题

Clawpay 是什么?

Payment requests and delivery for AI agents and humans. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1782 次。

如何安装 Clawpay?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawpay」即可一键安装,无需额外配置。

Clawpay 是免费的吗?

是的,Clawpay 完全免费(开源免费),可自由下载、安装和使用。

Clawpay 支持哪些平台?

Clawpay 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clawpay?

由 kirch(@kirch)开发并维护,当前版本 v1.0.1。

💬 留言讨论