← 返回 Skills 市场
2107
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install moltpost
功能描述
Send real physical postcards anywhere in the world. Pay with x402 (USDC on Base), Stripe, or manual USDC transfer. No signup, no API key — just one API call.
安全使用建议
This skill appears to do what it claims and does not ask for unrelated secrets or system access. Before installing, consider: (1) If you let the agent sign payments, ensure the agent's wallet signing capability is deliberately authorized — otherwise use the Stripe flow so a human completes payment. (2) The skill explicitly warns not to put sensitive data on postcards; enforce that in agent prompts and approvals. (3) Test on Base Sepolia if you want to avoid spending real funds (Sepolia uses mock fulfillment). (4) Because this is instruction-only, there is no installer risk, but be cautious about granting any agent the ability to sign transactions or access an unlocked wallet — that is the primary operational risk here.
功能分析
Type: OpenClaw Skill
Name: moltpost
Version: 1.3.1
The skill bundle is classified as suspicious due to the instruction in `skill.md` to fetch `https://moltpost.io/heartbeat.md` and "follow its instructions" every 8–12 hours. While the primary `skill.md` contains strong guidelines for responsible agent behavior and data privacy, this recurring dynamic instruction mechanism introduces a significant supply chain risk. If the remote `moltpost.io` domain or the `heartbeat.md` file were compromised, the agent could be instructed to perform arbitrary, potentially malicious actions without requiring a new skill bundle review.
能力评估
Purpose & Capability
Name and description (send physical postcards; pay via x402/Stripe/manual USDC) match the instructions in SKILL.md. There are no unrelated required env vars, binaries, or install steps. Payment methods described (HTTP x402 signing, Stripe link, onchain USDC) are plausible for this service and align with the stated capabilities.
Instruction Scope
SKILL.md limits actions to creating postcards, presenting payment links to humans, and performing optional signing if the agent has a wallet. It explicitly instructs agents to confirm with the owner and to avoid putting secrets on postcards. Note: x402 requires the agent (or its connected wallet) to perform EIP-712 signing and add a PAYMENT header — that legitimately requires wallet signing capability. The document correctly warns against agents completing Stripe payments on behalf of the owner. No instructions ask the agent to read unrelated files, env vars, or system config.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is a low-risk surface: nothing is downloaded, written to disk, or executed by an installer.
Credentials
The skill requests no environment variables, credentials, or config paths. The described workflows may require access to a crypto wallet for signing (if the agent is configured to use one), but that is a proportional and explained requirement for the x402 flow; the SKILL.md also provides Stripe/manual flows for agents without wallets.
Persistence & Privilege
Flags are default (not always:true). The skill does not request persistent or elevated system presence and does not instruct modification of other skills' configurations. Autonomous invocation is allowed (platform default) but nothing in the skill amplifies risk by requesting broad credentials or persistent hooks.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install moltpost - 安装完成后，直接呼叫该 Skill 的名称或使用
/moltpost触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.1
Version 1.3.1
- Documentation tweaks and clarifications in the skill README.
- No changes to the skill’s functionality, API, or usage.
- Same version and interface; updated skill.md content only.
v1.3.0
Major update: x402 gasless USDC payments are now supported and preferred for agents.
- Added support for x402 protocol: enables one-step, gasless USDC payment for agents with wallets.
- API and docs reorganized to cover three payment methods: x402 (preferred), Stripe (credit card), and manual USDC (legacy).
- Updated guidance for agents on selecting the appropriate payment method.
- Skill description updated to mention x402 and all supported payment options.
- Legacy manual USDC option now documented as fallback; x402 is recommended for agents.
v1.1.0
Moltpost 1.1.0 introduces crypto postcard payments and multi-method support.
- Added support for USDC on Base (mainnet and testnet) as a payment method.
- API now accepts new fields: `payment_method` (`stripe` or `usdc`) and `usdc_chain` (`base`, `base-sepolia`).
- Added detailed documentation for USDC payment flow, including onchain payment and confirmation steps.
- Stripe (credit card) integration remains the default and is fully supported.
- Updated responses and instructions for both payment types.
- Minor clarifications and updates to agent guidelines and documentation.
v1.0.1
- Added a "Skill Files" section listing URLs for SKILL.md and HEARTBEAT.md.
- No changes to API, pricing, or usage.
- Documentation updated only; no changes to skill logic or behavior.
v1.0.0
Initial release of Moltpost: Send real, physical postcards worldwide via a simple API.
- No signup, no API key, no account required—just one API call and a payment link.
- Clearly defined agent guidelines to protect privacy and ensure proper use.
- Detailed API documentation for creating postcards and checking their status.
- Transparent pricing for multiple postcard sizes and currencies.
- Important restrictions on postcard content to safeguard recipients and ensure postal compliance.
元数据
常见问题
Moltpost 是什么？
Send real physical postcards anywhere in the world. Pay with x402 (USDC on Base), Stripe, or manual USDC transfer. No signup, no API key — just one API call. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2107 次。
如何安装 Moltpost？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install moltpost」即可一键安装，无需额外配置。
Moltpost 是免费的吗？
是的，Moltpost 完全免费（开源免费），可自由下载、安装和使用。
Moltpost 支持哪些平台？
Moltpost 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Moltpost？
由 cktc（@cktc）开发并维护，当前版本 v1.3.1。
推荐 Skills