← 返回 Skills 市场

Ghost Protocol OpenClaw Pay

Name: Ghost Protocol OpenClaw Pay
Author: ghostprotoinfra

作者 ghostprotoinfra · GitHub ↗ · v1.5.0 · MIT-0

darwinlinuxwin32 ⚠ suspicious

302

总下载

当前安装

版本数

在 OpenClaw 中安装

/install openclaw-ghost-pay

功能描述

Discover Ghost payment requirements, execute real x402 calls, report x402 settlements, and run GhostWire quote/prepare/status flows for direct escrow.

安全使用建议

This package appears to be what it says: helpers to discover payment requirements, call merchant x402 endpoints, report settlements, and handle GhostWire flows. The main risk is the required GHOST_SIGNER_PRIVATE_KEY — it is a high-value signing credential that the scripts use to create settlement-auth signatures and to authorize payments. Only install this skill into agent runtimes that you fully trust, keep the key in secure secret storage (not in plain config or prompts), consider using a limited-purpose signing key if possible, and restrict or require human approval for any autonomous agent actions that can perform live paid requests. Test initially with --dry-run and ensure GHOST_OPENCLAW_BASE_URL is the intended endpoint (do not allow unexpected base-url overrides). Monitor transactions and rotate the key if unexpected activity occurs.

功能分析

Type: OpenClaw Skill Name: openclaw-ghost-pay Version: 1.5.0 The skill bundle provides legitimate-looking tools for Ghost Protocol payments and escrow, but it possesses high-risk capabilities including handling a private key (GHOST_SIGNER_PRIVATE_KEY) for cryptographic signing and making external network requests. Specifically, bin/call-x402.mjs and bin/report-x402-settlement.mjs use the private key to sign transactions and authorization messages sent to ghostprotocol.cc and user-defined merchant endpoints. Furthermore, the documentation in README.md and INSTALL.md references a missing script (scripts/clawhub.ps1) described as applying a 'DNS shim,' which is an unusual and potentially risky networking behavior not fully explained in the provided source code.

能力评估

✓ Purpose & Capability

Name/description (Ghost payment + GhostWire flows) align with the files, declared node binary, and the single required env var GHOST_SIGNER_PRIVATE_KEY. Declared dependencies (viem, x402, x402-fetch) and scripts are appropriate for signing and x402/ghostwire interactions.

✓ Instruction Scope

SKILL.md and the bin/*.mjs helpers only instruct network calls to Ghost endpoints and merchant URLs, and signing of auth payloads with the provided private key. The runtime instructions do not attempt to read unrelated files or environment variables beyond those declared, and they include dry-run and safety guidance.

✓ Install Mechanism

Install is standard Node/npm (package.json lists dependencies). No downloads from arbitrary URLs, no extract-from-unknown-host steps; everything is packaged as source JS helpers and npm dependencies.

ℹ Credentials

Only one required secret: GHOST_SIGNER_PRIVATE_KEY — which is expected and necessary for the skill to sign x402/merchant auth and settlement reports. This is a high-value credential (can produce valid signatures); its request is proportionate but requires careful secret management and use of a key with appropriate scope/limits.

⚠ Persistence & Privilege

always:false (good), but disable-model-invocation is false (normal default) so an agent with this skill and access to the signing key could autonomously execute real paid x402 calls and settlement reports. That behavior is consistent with the skill's purpose but represents operational risk if the key is provided to an agent without adequate human oversight, invocation controls, or runtime isolation.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install openclaw-ghost-pay
安装完成后，直接呼叫该 Skill 的名称或使用 /openclaw-ghost-pay 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.5.0

openclaw-ghost-pay 1.5.0 - Bumped version to 1.5.0 in all metadata. - Updated documentation in INSTALL.md, README.md, and SKILL.md for clarity. - No breaking changes to environment variables or usage flows. - Minor text edits and formatting improvements across documentation files.

v1.4.0

Version 1.4.0 - Added new environment variables and CLI options for GhostWire flows, including support for request prompts, JSON, wallet, metadata, and explicit spec hash overrides. - Updated documentation and examples in SKILL.md, README.md, QUICKSTART.md, and INSTALL.md to reflect new wire job input options and improved usage clarity. - Enhanced create-wire-job-from-quote to support --request-prompt and related structured fields for clearer consumer task specification. - Refined safe usage guidance for GhostWire, emphasizing separation of task data and result metadata.

v1.3.0

openclaw-ghost-pay 1.3.0 adds direct x402 call and settlement reporting support, enhancing real-world merchant integration. - Added bin/call-x402.mjs for making real x402 merchant endpoint calls. - Added bin/report-x402-settlement.mjs to report verified x402 payment settlements to Ghost for GhostRank. - Removed bin/pay-gate-x402.mjs; related flows are now handled by new scripts. - Updated docs (README.md, QUICKSTART.md, SKILL.md) to cover new x402 flow and reporting. - Expanded environment variables for agent/endpoint config and settlement use cases. - Updated dependency instructions for newer viem requirement.

v1.2.3

**GhostWire direct escrow flow improvements and documentation updates.** - Updated documentation for clarity, including changes to GhostWire flow (now quote/prepare/status). - Added `GHOSTWIRE_APPROVAL_MODE` environment variable. - GhostWire quote script now requires `--client` argument. - Adjusted safe usage rules; removed logging of `GHOSTWIRE_EXEC_SECRET`. - Various docstring and help text updates for improved accuracy.

v1.2.2

- Bumped version to 1.2.2. - Updated documentation in INSTALL.md, README.md, and SKILL.md. - No changes to core functionality.

v1.2.1

**Skill now ships as a bundled package with helper scripts and improved environment documentation.** - Added 11 new files, including helper scripts for key GhostPay and GhostWire flows, and new documentation (INSTALL.md, QUICKSTART.md, README.md). - Updated SKILL.md with concise usage instructions, explicit environment variable requirements, and safer usage guidelines. - Helper binaries can now be invoked from the installed base directory using `{baseDir}`. - Metadata updated to specify dependencies, supported OS, and primary environment variables. - Emphasizes separation of Express (simple payments) and Hosted GhostWire (escrow job) flows.

v1.1.0

Changelog: v1.1.0 - Added GhostWire MCP helper wrappers: - get-wire-quote - get-wire-job-status - Kept Express mode (GhostGate x402 + EIP-712) as full executable flow. - Clarified scope: Wire mode in this skill is quote/status helper level only (no direct on-chain escrow execution). - Updated docs: README, INSTALL, QUICKSTART, SKILL instructions. SKILL.md (root of uploaded folder) Required env GHOST_SIGNER_PRIVATE_KEY (required for Express paid calls) Optional env GHOST_OPENCLAW_BASE_URL=https://ghostprotocol.cc GHOST_OPENCLAW_CHAIN_ID=8453 GHOST_OPENCLAW_TIMEOUT_MS=15000 GHOSTWIRE_PROVIDER_ADDRESS=0x... GHOSTWIRE_EVALUATOR_ADDRESS=0x... GHOSTWIRE_PRINCIPAL_AMOUNT=1000000

元数据

Slug openclaw-ghost-pay

版本 1.5.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 7

常见问题

Ghost Protocol OpenClaw Pay 是什么？

Discover Ghost payment requirements, execute real x402 calls, report x402 settlements, and run GhostWire quote/prepare/status flows for direct escrow. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 302 次。

如何安装 Ghost Protocol OpenClaw Pay？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-ghost-pay」即可一键安装，无需额外配置。

Ghost Protocol OpenClaw Pay 是免费的吗？

是的，Ghost Protocol OpenClaw Pay 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Ghost Protocol OpenClaw Pay 支持哪些平台？

Ghost Protocol OpenClaw Pay 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（darwin, linux, win32）。

谁开发了 Ghost Protocol OpenClaw Pay？

由 ghostprotoinfra（@ghostprotoinfra）开发并维护，当前版本 v1.5.0。