← 返回 Skills 市场
jakemeyer125-design

ClawPay Escrow

作者 jakemeyer125-design · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
554
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install clawpay-escrow
功能描述
Send and receive escrow payments on Solana using ClawPay. Pay other AI agents, lock funds in escrow, confirm delivery, release payments, check receipts, and...
使用说明 (SKILL.md)

ClawPay — Escrow Payments for AI Agents

You can send and receive trustless escrow payments on Solana using ClawPay. This skill handles the full payment lifecycle: locking funds, confirming delivery, releasing payments, and checking receipts.

Setup

First, check if clawpay is installed:

pip3 show clawpay

If not installed:

pip3 install clawpay

The user's Solana wallet keypair is required. Check for it at the path in the SOLANA_KEYPAIR_PATH environment variable, or look for common locations:

  • ~/wallet.json
  • ~/.config/solana/id.json
  • ~/projects/clawpay/program-keypair.json

If no keypair is found, ask the user to provide one or generate one with solana-keygen new --outfile ~/wallet.json.

How ClawPay Works

ClawPay is a time-locked escrow protocol on Solana. Every payment follows this flow:

  1. T0 — Lock: Buyer locks SOL into an escrow account
  2. T1 — Deliver: Seller must deliver before the deadline, or funds auto-refund to buyer
  3. T2 — Verify: Buyer confirms delivery, or funds auto-release to seller after the window
  4. Settle: 98% goes to seller, 1% to ClawPay, 1% to referrer (if any)
  5. Receipt: Cryptographic receipt minted on-chain for both parties

No trust required between agents. The timeline enforces everything.

Core Operations

Pay Another Agent (Create Escrow)

When asked to pay an agent or buy a service:

from clawpay import Client
from solders.keypair import Keypair
from solders.pubkey import Pubkey

keypair = Keypair.from_json(open("KEYPAIR_PATH").read())
client = Client(keypair)

escrow = client.create_escrow(
    seller=Pubkey.from_string("SELLER_PUBKEY"),
    amount_sol=AMOUNT,
    delivery_secs=DELIVERY_TIME,       # seconds until delivery deadline
    verification_secs=VERIFICATION_TIME # seconds for dispute window (min 10)
)
print(f"Escrow created: {escrow.address}")
print(f"Amount: {escrow.amount_sol} SOL")
print(f"Delivery deadline: {escrow.t1}")
print(f"Verification ends: {escrow.t2}")

Default values if not specified:

  • delivery_secs: 600 (10 minutes)
  • verification_secs: 30 (30 seconds)
  • amount_sol: Ask the user — never assume an amount

Confirm Delivery (As Seller)

When you've completed a service and need to confirm delivery:

from clawpay import Client
from solders.keypair import Keypair
from solders.pubkey import Pubkey

keypair = Keypair.from_json(open("KEYPAIR_PATH").read())
client = Client(keypair)

escrow_address = Pubkey.from_string("ESCROW_ADDRESS")
client.confirm_delivery(escrow_address, keypair)
print("Delivery confirmed. Waiting for verification window.")

Release Funds (After Verification)

After the verification window passes, anyone can trigger release:

client.auto_release(Pubkey.from_string("ESCROW_ADDRESS"))
print("Funds released to seller.")

Refund (Missed Delivery Deadline)

If the seller missed the delivery deadline:

client.auto_refund(Pubkey.from_string("ESCROW_ADDRESS"))
print("Funds refunded to buyer.")

Check Escrow Status

escrow = client.get_escrow(Pubkey.from_string("ESCROW_ADDRESS"))
print(f"Status: {escrow.status}")
print(f"Amount: {escrow.amount_sol} SOL")
print(f"Delivered: {escrow.delivered}")
print(f"Released: {escrow.released}")

Check Agent Reputation (Receipts)

receipts = client.get_receipts(Pubkey.from_string("AGENT_PUBKEY"))
print(f"Total transactions: {len(receipts)}")
for r in receipts:
    outcome = ["released", "refunded", "disputed"][r.outcome]
    print(f"  #{r.receipt_index}: {r.amount_sol} SOL — {outcome}")

Important Constraints

  • Minimum escrow: 0.05 SOL
  • Maximum escrow: 10.0 SOL
  • Minimum verification window: 10 seconds
  • Maximum delivery time: 30 days
  • Fee: 2% on settlement (1% ClawPay + 1% referrer)
  • Network: Solana Mainnet (default) or Devnet

Guardrails

  • NEVER create an escrow without confirming the amount with the user first
  • NEVER send funds without verifying the seller's public key
  • Always display the escrow address after creation — the user needs it
  • Always check escrow status before attempting release or refund
  • If a keypair file is not found, ask the user — do not guess
  • Report all errors clearly, especially insufficient balance errors
  • When checking reputation, mention both successful and failed transactions for honesty

Verification

After any transaction, you can verify on Solana Explorer:

Links

安全使用建议
This skill appears coherent for making Solana escrow payments, but it needs access to your wallet private key and may install a Python package from PyPI. Before installing/using it: (1) verify you trust the referenced package/source (check the GitHub repo and PyPI package), (2) point SOLANA_KEYPAIR_PATH to a wallet with only the funds you are willing to risk (or use a separate test wallet / Devnet), (3) avoid letting the agent search common filesystem locations—set SOLANA_KEYPAIR_PATH explicitly so it doesn't probe your home directory, (4) prefer using a hardware wallet or limited-capability key if possible (note: this skill expects a file keypair), and (5) review on-chain program IDs/fees and run small test transactions first.
功能分析
Type: OpenClaw Skill Name: clawpay-escrow Version: 1.0.0 The skill is classified as suspicious due to instructions in `SKILL.md` that create significant prompt injection vulnerabilities and supply chain risks. Specifically, the AI agent is instructed to search common filesystem locations (`~/wallet.json`, `~/.config/solana/id.json`, etc.) for sensitive Solana keypair files, granting it broad and potentially abusable file access. Additionally, the `pip3 install clawpay` command introduces a supply chain risk, as a compromised package could lead to arbitrary code execution. While the stated purpose is benign, these instructions represent risky capabilities that could be exploited by a malicious user prompt.
能力标签
cryptorequires-walletcan-make-purchasescan-sign-transactions
能力评估
Purpose & Capability
Name/description (Solana escrow payments) align with what the skill asks for: python, pip, and a Solana keypair. The primary credential (SOLANA_KEYPAIR_PATH) is appropriate for signing transactions.
Instruction Scope
SKILL.md instructs the agent to read the user's private keypair file (via SOLANA_KEYPAIR_PATH or common filesystem locations). Reading a keypair is necessary for signing transactions but is sensitive; the instructions also advise generating a key if not found. The agent is directed to search common paths beyond the declared env var, which is broader filesystem access than the single env var implies.
Install Mechanism
No formal install spec is provided; the doc tells users/agents to run `pip3 install clawpay` and references PyPI/GitHub. Installing a third‑party pip package is expected for an SDK but carries supply‑chain risk — the installer source should be trusted and verified.
Credentials
Only SOLANA_KEYPAIR_PATH is declared as the primary credential, which is proportionate. However, the instructions still direct checking multiple common keypair file locations (~/wallet.json, ~/.config/solana/id.json, etc.), which expands file access. Access to the private key is required for the skill's function but is highly sensitive.
Persistence & Privilege
The skill is instruction-only and not always-enabled; it does not request persistent system privileges or to modify other skills. Default autonomous invocation is allowed but not combined with unusual privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawpay-escrow
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawpay-escrow 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — escrow payments for AI agents on Solana
元数据
Slug clawpay-escrow
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

ClawPay Escrow 是什么?

Send and receive escrow payments on Solana using ClawPay. Pay other AI agents, lock funds in escrow, confirm delivery, release payments, check receipts, and... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 554 次。

如何安装 ClawPay Escrow?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawpay-escrow」即可一键安装,无需额外配置。

ClawPay Escrow 是免费的吗?

是的,ClawPay Escrow 完全免费(开源免费),可自由下载、安装和使用。

ClawPay Escrow 支持哪些平台?

ClawPay Escrow 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ClawPay Escrow?

由 jakemeyer125-design(@jakemeyer125-design)开发并维护,当前版本 v1.0.0。

💬 留言讨论