← 返回 Skills 市场
93
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install coclaw
功能描述
List and buy AI services on Coclaw. Sellers create listings. Buyers call the supplier endpoint with x402 payment and get results in the response.
使用说明 (SKILL.md)
Coclaw
- Seller: create a listing on the directory
- Buyer: browse listings, call the supplier endpoint with x402, get the result
Defaults
- API:
https://coclawapi-production.up.railway.app - Agent:
https://coclawagent-production.up.railway.app/task - Network:
stellar:testnet - Token: USDC (
CBIELTK6YBZJU5UP2WWQEUCYKLPU6AUNZ2BQ4WWFEIE3USCIHMXQDAMA) - Facilitator:
https://www.x402.org/facilitator
Scripts
scripts/create_listing.py— create a seller listingscripts/call_service.py— browse listings and call a service
Sell-Side
python3 scripts/create_listing.py \
--name "Research Agent" \
--description "Produces market research summary" \
--price-usdt "1.5"
python3 scripts/create_listing.py --dry-run
Buy-Side
List available services:
python3 scripts/call_service.py --list
Call a service:
python3 scripts/call_service.py \
--service-id "svc_ai_summarizer" \
--input-json '{"text":"Long document here","max_points":5}'
Dry-run (show listing without calling):
python3 scripts/call_service.py --service-id "svc_code_reviewer" --dry-run
How It Works
- Buyer calls the supplier endpoint
- x402 middleware returns 402 with payment requirements
- Buyer signs Soroban auth entry, facilitator settles USDC on-chain
- Request passes through, supplier runs inference, returns result in 200
Pay and get the result. No API keys, no order lifecycle, no callbacks.
Security
- Fixed API base URL and agent URL — no overrides
- Endpoint locked to Coclaw agent — no SSRF
Error Rules
- If no active listing and no service-id, fail with clear message
- Surface exact server error messages
- If x402 payment fails, tell user to use an x402-enabled client
安全使用建议
This skill appears to do what it says: list and call Coclaw services. Before running it, review and accept the privacy/operational implications: the scripts will send your input payloads to third-party endpoints hosted on railway.app and rely on an external x402 facilitator to settle payments. Do not send sensitive secrets or private data as inputs. Use the provided --dry-run flags to inspect payloads and listings before attempting a paid call. If you plan to use it in production, verify the authenticity of the API/agent/facilitator URLs and consider running calls on testnet first (the SKILL.md mentions Stellar testnet). Finally, note the small path/name mismatch (openclaw vs coclaw) in the code — you may want to double-check the listings endpoint is the correct one for your deployment.
功能分析
Type: OpenClaw Skill
Name: coclaw
Version: 1.0.1
The skill bundle provides a legitimate interface for the Coclaw marketplace, allowing users to list and purchase AI services using the x402 payment protocol on the Stellar network. The scripts `scripts/call_service.py` and `scripts/create_listing.py` perform standard HTTP requests to a specified API (coclawapi-production.up.railway.app) to manage service listings and facilitate service calls. The code does not contain any evidence of data exfiltration, malicious execution, or obfuscation, and its behavior is entirely consistent with the stated purpose in `SKILL.md`.
能力标签
能力评估
Purpose & Capability
Name/description match the included scripts and SKILL.md. The two Python scripts implement seller (create_listing) and buyer (call_service) flows, use fixed Coclaw API/agent endpoints, and do not request unrelated OS binaries, environment variables, or credentials.
Instruction Scope
Runtime instructions are narrow and describe contacting the fixed Coclaw API/agent endpoints and using x402 payment. This inherently sends user-provided payloads to external services (railway.app-hosted endpoints and an x402 facilitator). That is expected for this skill but is a privacy/operational risk — do not send sensitive secrets in inputs. Minor inconsistency: fetch_listings calls /v1/openclaw/listings while create_listing posts to /v1/services; this is likely a naming/path mismatch but not clearly malicious.
Install Mechanism
No install spec or external downloads; the skill is instruction-only with two local Python scripts. Nothing is written to disk or fetched during installation by the skill itself.
Credentials
The skill requires no environment variables, no secret keys, and declares no primary credential. Defaults (USDC token id, default supplier public key, API URLs) are baked into code/markdown rather than requested as secrets — consistent with the skill's purpose.
Persistence & Privilege
The skill does not request permanent presence (always:false), does not modify other skills or system-wide config, and does not persist credentials. It only makes outbound requests when run.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install coclaw - 安装完成后,直接呼叫该 Skill 的名称或使用
/coclaw触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Major update: Buy-side automation now uses a unified call method instead of order creation.
- Added scripts/call_service.py for buyers to browse and call AI services directly.
- Removed scripts/create_order.py and the order creation flow.
- Buyers now interact with listings using x402 payment and receive the result in the response, with no order lifecycle management.
- Simplified documentation: clear seller/buyer instructions and sample commands.
- Security rules enforced for fixed API endpoints and no URL overrides.
v1.0.0
coclaw 3.0.0 is a major update introducing automated buy/sell workflows and end-to-end integration with OpenClaw and Coclaw APIs.
- Adds automated seller listing creation and buyer order creation via scripts (`create_listing.py`, `create_order.py`)
- Introduces support for x402-based USDC payments on Stellar testnet
- Details the active listings, default configs, and output structure for flows
- Provides improved error handling, transaction proof links, and status polling
- Disables manual API URL overrides to enhance security and trust in automated execution
元数据
常见问题
coclaw 是什么?
List and buy AI services on Coclaw. Sellers create listings. Buyers call the supplier endpoint with x402 payment and get results in the response. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 93 次。
如何安装 coclaw?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install coclaw」即可一键安装,无需额外配置。
coclaw 是免费的吗?
是的,coclaw 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
coclaw 支持哪些平台?
coclaw 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 coclaw?
由 fawuzan(@fozagtx)开发并维护,当前版本 v1.0.1。
推荐 Skills