← 返回 Skills 市场
clabasky

Clawprint-skill

作者 Chris Labasky · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
64
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install clawprint-skill
功能描述
Create LLCs for AI agents with human sponsor oversight. Use when an agent needs to form a legal business entity.
使用说明 (SKILL.md)

Clawprint — LLC Formation for AI Agents

Form LLCs for AI agents. Each agent gets a legal business entity with an EIN and bank account.


HTTP API — discovery first (use the script)

Authentication model

  1. GET /api/products — no credentials (discovery).
  2. POST /api/users — no credentials. The JSON response includes public_key and secret_key: opaque strings prefixed with public_ and secret_.
  3. Persist both — add them to .env as CLAWPRINT_PUBLIC_KEY and CLAWPRINT_SECRET_KEY (see .env.example). Treat the secret like a password; do not commit real values.
  4. Authenticated routes (e.g. POST /api/businesses) — send both headers on every request: X-Public-Key and X-Secret-Key. The CLI reads the two env vars and sets those headers when auth is enabled (default). Use --no-auth only for discovery and user registration; use --public-key / --secret-key for one-off overrides.

If either header is missing or the pair does not match a registered user, the server returns 401.


Discovery — always call GET /api/products first using the CLI (default when you pass no flags):

  1. Set the base URL in .env (see .env.example): CLAWPRINT_SITE_URL (deployment origin, e.g. Convex) or CLAWPRINT_API_URL (default https://clawprintai.com/api).
  2. From the clawprint-skill directory, run with no arguments — this performs GET /api/products and prints the products list (JSON array) on stdout:
node scripts/clawprint.js

Equivalent: npm run clawprint (runs scripts/clawprint.js). No auth header is sent for this call.

  1. Parse the JSON array — each entry includes id, method, path, description, and agent_integration (auth, headers, body, steps).
  2. Issue later calls with the same script--product \x3Cid> (fetches GET /api/products again to resolve method/path) or explicit --method / --path, matching the products list. After you have registered via POST /api/users, set CLAWPRINT_PUBLIC_KEY and CLAWPRINT_SECRET_KEY in .env so protected calls send both key headers; use --no-auth or explicit --public-key / --secret-key when you intend to override that behavior.

Without this repo, you can hit the same URL with curl (no auth):

curl -sS "{origin}/api/products" -H "Accept: application/json"

Quick Start

CLI: products first, then any route

# First call (always): GET /api/products — products list on stdout
node scripts/clawprint.js

# Register user (no auth). Response JSON includes "public_key" and "secret_key" — add to .env:
#   CLAWPRINT_PUBLIC_KEY=public_…
#   CLAWPRINT_SECRET_KEY=secret_…
node scripts/clawprint.js --product create_user --no-auth \
  --body '{"email":"[email protected]","display_name":"My Agent"}'

# Or: explicit path
node scripts/clawprint.js --method POST --path /api/users --no-auth \
  --body '{"email":"[email protected]","display_name":"My Agent"}'

Create a Business

With CLAWPRINT_PUBLIC_KEY and CLAWPRINT_SECRET_KEY set in .env (from the registration response), call POST /api/businesses (or the matching product id from the products list) without --no-auth so the CLI sends X-Public-Key and X-Secret-Key. Use a JSON --body that matches that product’s agent_integration (e.g. requested_business_name per the live products catalog).

The sponsor receives an email to verify identity (one-time KYC).

Check Status

From the same script, use GET /businesses/:id/status (or the matching product id from the products list): --method GET, --path, and optional --query. If that product’s agent_integration requires auth, keep CLAWPRINT_PUBLIC_KEY and CLAWPRINT_SECRET_KEY in .env and do not pass --no-auth.


How It Works

What You Get

Each agent business is a Wyoming DAO LLC with:

  • Legal business entity registered with the state
  • EIN (tax ID) from the IRS
  • FDIC-insured bank account (routing & account number)

Legal Model

  • Agent — Operates the business
  • Sponsor — Legal owner, provides KYC, maintains oversight
  • Operating Agreement — Delegates authority to agent

Timeline

  1. Submit business details via the API (CLI: node scripts/clawprint.js with the businesses product/path)
  2. Sponsor verifies identity via email (KYC)
  3. Clawprint files LLC with Wyoming
  4. IRS issues EIN (1-5 business days)
  5. Bank account opened (2-5 business days)
  6. Business is active (3-10 days total)

Requirements

For Sponsor:

  • US citizen or resident
  • Valid SSN for IRS reporting
  • Email for KYC verification

For Agent:

  • Valid business name and purpose
  • Sponsor email

Cost

Formation: ~$150 (Wyoming filing + registered agent + misc)
Ongoing: ~$10/month (registered agent)


Sponsor Dashboard

After KYC, sponsor can:

  • View all their sponsored businesses
  • See business status in real-time
  • Manage bank account access

Limitations

  • US only (Wyoming LLCs only)
  • 3-10 day timeline (cannot be expedited)
  • Sponsor required (sponsor maintains legal responsibility)

For complete API reference, see REFERENCE.md

安全使用建议
This package contains a CLI and a tiny HTTP client that talk to a remote API (default https://clawprintai.com/api) to form LLCs. Before installing or using it: 1) Verify the publisher and the API domain (clawprintai.com) independently — this repo's origin is 'unknown' in the registry. 2) Treat CLAWPRINT_SECRET_KEY like a password: do not commit .env to source control and consider using one-off keys or runtime-only injection instead of storing secrets in the repository. 3) The registry metadata claims 'no required env vars' and 'instruction-only' but the code requires Node.js and env keys — consider this an authoring error; prefer skills whose metadata matches their behavior. 4) The service will require sponsor PII (SSN) for IRS/banking workflows — only provide that to a legal, verified provider. 5) If you plan to allow the agent to call this skill autonomously, be aware stored credentials could be used by the agent; limit scope and monitor API activity. If any of the above is unclear, ask the skill author for proof of identity, a privacy/terms page for the API, and an explanation of why registry metadata omits required env vars before proceeding.
功能分析
Type: OpenClaw Skill Name: clawprint-skill Version: 1.0.0 The clawprint-skill bundle is a legitimate tool designed to allow AI agents to interact with the Clawprint API for LLC formation and business management. The code in `lib/clawprint-http.js` and `scripts/clawprint.js` implements standard HTTP communication and a CLI interface using built-in Node.js modules, with no external dependencies or suspicious execution patterns. The instructions in `SKILL.md` and other documentation are consistent with the stated purpose of business formation and do not contain any prompt injection attempts or requests for unauthorized data access.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The skill's stated purpose (form LLCs for AI agents) matches the included code (HTTP client and CLI to call an external formation API). However the registry metadata declares 'required env vars: none' and 'instruction-only', while SKILL.md and the code clearly expect Node.js, an npm install, and environment variables (CLAWPRINT_API_URL, CLAWPRINT_PUBLIC_KEY, CLAWPRINT_SECRET_KEY). That mismatch (declared nothing vs. actually needing credentials and runtime) is incoherent and increases risk.
Instruction Scope
Runtime instructions are focused on discovering products and calling the remote API, and they instruct the user to persist API keys to a local .env file and to run node scripts/clawprint.js. The CLI can also read arbitrary local files when you pass --body @file.json (which is normal for a CLI). Instructions do not ask the agent to read unrelated system files or to exfiltrate data to third parties beyond the documented API, but they do instruct persisting sensitive keys locally (.env) and using a remote endpoint (https://clawprintai.com/api by default).
Install Mechanism
Registry says 'no install spec — instruction-only', but the repo contains package.json, scripts, and a README that explicitly tells you to run npm install and use Node.js >=18. This is a mismatch (not truly instruction-only). The install path is npm (package.json) which is standard and lower risk; there are no arbitrary archive downloads or obscure URLs in the install flow.
Credentials
The skill uses two secrets (CLAWPRINT_PUBLIC_KEY, CLAWPRINT_SECRET_KEY) for authenticated API calls; that is proportionate to calling a protected HTTP API. The problem is these env vars are not declared in the registry metadata (it lists none), which is inconsistent. The SKILL.md also asks sponsors to supply SSNs and other personal data to the service (required for the business formation process) — that is expected for the service but is high-sensitivity data that the user must not hand to an untrusted or unverified provider.
Persistence & Privilege
The skill does not request elevated platform privileges ('always' is false) and does not modify other skills. It does ask users to persist API keys into a .env file in the repo; this is local persistence and not platform-wide, but it creates a risk if the repo is later committed or shared. Autonomous invocation is allowed (default) but that is normal for skills; combine this with the credential storage risk before enabling autonomous runs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawprint-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawprint-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of clawprint-skill v1.0.0. - Enables LLC formation for AI agents with human sponsor oversight. - Provides HTTP API and CLI for business creation, user registration, and status checks. - Implements authentication using public/secret key pairs and secure headers. - Agents receive a Wyoming DAO LLC, EIN, and FDIC-insured bank account with sponsor KYC.
元数据
Slug clawprint-skill
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Clawprint-skill 是什么?

Create LLCs for AI agents with human sponsor oversight. Use when an agent needs to form a legal business entity. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 64 次。

如何安装 Clawprint-skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawprint-skill」即可一键安装,无需额外配置。

Clawprint-skill 是免费的吗?

是的,Clawprint-skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Clawprint-skill 支持哪些平台?

Clawprint-skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clawprint-skill?

由 Chris Labasky(@clabasky)开发并维护,当前版本 v1.0.0。

💬 留言讨论