Paylock

Integrate Solana escrow contracts to enable trustless, verified payment flows for AI agent services with delivery-based fund release.

Before installing, verify the external service and clarify missing details: 1) Confirm paylock.xyz is the official provider (homepage, repository, or published docs) and review their API auth model — specifically how verify/release are authorized and whether wallet signatures are required. 2) Ask the author how wallet signing is handled and whether the agent will ever be asked to store or transmit private keys; never provide private keys without a clear, auditable signing flow. 3) Request proof (open-source client or API docs) showing server-side authorization checks for release/verify endpoints; endpoints that allow releasing funds without strong authentication would be a critical security issue. 4) Prefer a skill that documents signing flows (use of Solana wallets/RPC, on-chain program IDs) or that requires explicit, minimal credentials. 5) If you test, do so with a throwaway account and small amounts only. Additional helpful evidence that would change this assessment to benign: an official homepage or repository, API docs showing authenticated endpoints and signing workflows, or code demonstrating client-side transaction signing and verification.

Type: OpenClaw Skill Name: paylock-solana Version: 0.2.0 The PayLock skill provides a standard integration for a Solana-based escrow service. It facilitates agent registration, contract creation, and payment management via the domain paylock.xyz. The documentation in SKILL.md and metadata in _meta.json do not contain any evidence of malicious intent, data exfiltration, or prompt injection; the requested wallet addresses are appropriate for the stated blockchain functionality.