← 返回 Skills 市场
wolflabs88

CrawlHub

作者 WolfLabs88 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
43
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install crawlhub-reseller
功能描述
Sell CrawlHub API keys for Twitter/X crawling via ETH payment. Use when a user wants to buy, access, or get pricing for CrawlHub API access. Handles wallet s...
使用说明 (SKILL.md)

CrawlHub Reseller Skill

Sell CrawlHub API keys for Twitter/X crawling — fully automated with ETH payment verification.

Overview

This skill wraps the CrawlHub Reseller Agent which:

  • Verifies wallet ownership via Ethereum signature
  • Verifies ETH payment on-chain via Etherscan
  • Delivers API key + full API documentation
  • Runs as standalone service on port 3000

How It Works

Customer Agent → Signature + TX Hash → Reseller Agent → API Key + Docs

Flow:

  1. Customer signs message with wallet (proves ownership)
  2. Customer sends TX hash (proves payment)
  3. Reseller verifies both on-chain
  4. If valid → API key delivered with CrawlHub API docs

Payment

  • Price: 0.010 ETH per 24 hours
  • Payment wallet: 0x19c4455Bf8C5D8662B434e1985cd31B8947A7C39
  • Verification: Etherscan API check

Customer Request Format

{
  "customerWallet": "0x742d35Cc6634C0532925a3b844Bc9e7595f5bA12",
  "signature": "0x1234abcd...",
  "message": "Request API Key for CrawlHub\
Wallet: 0x742d35Cc6634C0532925a3b844Bc9e7595f5bA12\
Nonce: abc12345",
  "txHash": "0xabc123def456..."
}

Reseller Agent API

Endpoints:

  • POST /json-rpc — A2A JSON-RPC endpoint (tasks/send, agentcard/get)
  • GET /agent-card — Agent capabilities and endpoints
  • GET /health — Health check

Start Reseller:

cd /root/.openclaw/workspace/reseller-agent
node dist/server.js

CrawlHub API Docs

Full API documentation in references/crawlhub-api.md.

Base URL: https://api.thecrawlhub.com/api/v1

Auth:

  • POST /auth/login → JWT token
  • Use Authorization: Bearer {token} + X-API-KEY: {key}

Endpoints:

  • GET /profile/user/by-screen-name?screen_name={username}
  • GET /profile/tweets/by-screen-name?screen_name={username}
  • GET /timeline/search?query={query}&mode=top
  • GET /tweet/by-id?tweet_id={id}

Verification Results

On successful sale, notify via:

  1. Update /tmp/reseller-events.json with event
  2. Check /root/.openclaw/workspace/reseller-agent/notifications.json

Error Codes

  • Signature verification failed — Wallet signature doesn't match
  • Insufficient payment — Less than 0.010 ETH sent
  • Payment sent to wrong address — TX wasn't to our wallet
  • No API keys available — Pool exhausted
安全使用建议
Do not run or send funds based solely on this package. Before installing or running anything: (1) Request the missing server/source code (dist/server.js) and review it — do not run code you haven't inspected. (2) Resolve the pricing inconsistency (0.010 vs 0.015 ETH) and verify the operator identity for the hardcoded payment address. (3) Ask how Etherscan verification is performed and whether an ETHERSCAN_API_KEY or other credentials are required; ensure those secrets are declared and handled securely. (4) Confirm where CrawlHub API keys are generated/stored and obtain proof you will receive valid keys (or request an auditable key issuance mechanism). (5) If you must test, run the reseller service in an isolated sandbox/container with no access to your host /root workspace or other agent data, and do not transfer real ETH until you fully trust the operator. If the package owner cannot supply a complete server implementation and clear credential handling, treat the skill as incomplete and do not deploy it in production.
功能分析
Type: OpenClaw Skill Name: crawlhub-reseller Version: 1.0.0 The skill bundle facilitates the sale of Twitter/X crawling API keys via Ethereum payments. It includes helper scripts (scripts/sign-request.sh and scripts/request-api-key.sh) for wallet signature generation and payment verification, alongside an OpenAPI specification for the CrawlHub service. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the logic is consistent with the stated purpose of an automated reseller agent.
能力标签
cryptorequires-walletcan-make-purchasesrequires-oauth-tokenrequires-sensitive-credentials
能力评估
Purpose & Capability
The skill claims to run a 'Reseller Agent' that issues CrawlHub API keys, verifies Ethereum payments via Etherscan, and runs a server (node dist/server.js). However the repository does not include any server code or a dist/server.js; only two small helper scripts and API documentation are present. There is also an inconsistent price (SKILL.md: 0.010 ETH, references/crawlhub-api.json: 0.015 ETH). The skill does not declare any credentials or configuration for CrawlHub backend access or for Etherscan API keys, yet claims to deliver API keys and perform on-chain verification. These gaps are not proportionate to the stated capability.
Instruction Scope
Runtime instructions tell operators/agents to start a Node server from /root/.openclaw/workspace/reseller-agent and to read/write files at /tmp/reseller-events.json and /root/.openclaw/workspace/reseller-agent/notifications.json. The scripts post JSON-RPC tasks to localhost:3000. The skill's SKILL.md also references on-chain verification (Etherscan) and A2A JSON-RPC interactions with other agents. Instructions reference system/workspace paths outside the skill bundle and give broad discretion to interact with other agents — this expands scope beyond the small included scripts and may cause unintended access to local agent workspace or other skills' files.
Install Mechanism
There is no install spec (instruction-only plus two client helper scripts), so nothing is automatically downloaded. That lowers install-time risk. However the instructions expect a prebuilt Node service at /root/.openclaw/workspace/reseller-agent/dist/server.js to be present and runnable; since that server code is not included, the skill as shipped cannot operate without fetching or placing additional code. Running arbitrary/unreviewed server code in the root workspace would be higher risk if the missing pieces are later sourced from an untrusted location.
Credentials
The skill declares no required environment variables or primary credentials, yet runtime behavior depends on external services: Etherscan for on-chain verification and a CrawlHub backend for API key issuance. No Etherscan API key or CrawlHub service credentials are declared or explained. The skill also hardcodes a payment address (0x19c4...) and asks users to send ETH there — that is a sensitive financial action but not tied to any verifiable operator identity in the package. The lack of declared credentials for service verification is disproportionate to the stated operations.
Persistence & Privilege
The skill is not always-enabled and does not request platform-level privileges, which is good. However it instructs reading/writing files in /root/.openclaw/workspace and /tmp and running a server from that workspace; that can modify agent workspace state and notifications for other local agents. While not automatically granted by the package, these instructions create the expectation of persistent local service and workspace writes if an operator follows them — this should be treated carefully.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install crawlhub-reseller
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /crawlhub-reseller 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of crawlhub-reseller skill, enabling automated ETH-based sales of CrawlHub API keys for Twitter/X crawling. - Verifies customer wallet ownership via Ethereum signature. - Confirms on-chain ETH payment through Etherscan. - Delivers API key and complete CrawlHub API documentation upon successful verification. - Provides pricing (0.010 ETH/24h), payment address, and clear customer request/response flows. - Exposes A2A-compatible API endpoints for agent integration.
元数据
Slug crawlhub-reseller
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

CrawlHub 是什么?

Sell CrawlHub API keys for Twitter/X crawling via ETH payment. Use when a user wants to buy, access, or get pricing for CrawlHub API access. Handles wallet s... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 43 次。

如何安装 CrawlHub?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install crawlhub-reseller」即可一键安装,无需额外配置。

CrawlHub 是免费的吗?

是的,CrawlHub 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

CrawlHub 支持哪些平台?

CrawlHub 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 CrawlHub?

由 WolfLabs88(@wolflabs88)开发并维护,当前版本 v1.0.0。

💬 留言讨论