← 返回 Skills 市场
bubblevan

showmethemoney-pro

作者 Bubblevan · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
196
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install showmethemoney-pro
功能描述
execute the paid showmethemoney premium action through the merchant backend. use when the user wants to unlock or run the protected showmethemoney capability...
安全使用建议
This skill implements a premium payment flow that depends on a local merchant backend and the platform's StablePay runtime, but it does not declare those dependencies or any credentials. Before installing or enabling it, ask the publisher to: (1) explicitly list required runtime primitives/plugins (stablepay_runtime_status, stablepay_pay_via_gateway) and any credentials StablePay needs; (2) confirm why the merchant backend is expected at 127.0.0.1:8787 and whether that will contact external facilitator URLs; (3) clarify user consent and confirmation steps for real payments and per-report purchases; and (4) add safeguards (prompting the user and honoring local payment limits). Do not let the skill perform payments until you trust the local backend and the StablePay integration and you understand how user confirmation is handled.
功能分析
Type: OpenClaw Skill Name: showmethemoney-pro Version: 1.1.0 The skill 'showmethemoney-pro' (SKILL.md) implements a standard payment-gated workflow for accessing premium features. It coordinates between a local merchant backend (127.0.0.1:8787) and the 'stablepay' plugin to handle '402 Payment Required' errors and verify transaction success. The logic is transparently documented, lacks obfuscation, and shows no signs of data exfiltration or unauthorized command execution.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The SKILL.md describes a merchant-backed premium action with StablePay-powered payments, which is coherent with the skill name. However the skill does not declare that it requires the StablePay plugin/runtime primitives (stablepay_runtime_status, stablepay_pay_via_gateway) or access to a merchant backend on http://127.0.0.1:8787. Those runtime dependencies are necessary for the described purpose but are not listed in the registry metadata (no required env, no required config paths, no primary credential). The omission makes the declared purpose and the actual runtime requirements inconsistent.
Instruction Scope
Instructions explicitly tell the agent to read stablepay_runtime_status, call a local merchant endpoint, parse a 402 x402 payment requirement, and invoke stablepay_pay_via_gateway to perform payment. These steps are narrowly scoped to the payment flow the skill claims to implement. But the instructions expect access to platform-specific runtime state and a local service; the skill gives the agent broad authority to perform on-chain/monetary actions without describing explicit consent/confirmation behavior beyond 'use StablePay' and a single retry. The SKILL.md also says 'NEVER use any hardcoded or fallback values' which tightly couples the skill to the backend response and may prevent safe defaults or user prompts.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so nothing is written to disk and there are no package downloads. That low-risk delivery is consistent with the kind of platform-integrated payment flow described.
Credentials
The skill uses payment and identity data (buyer DID from stablepay_runtime_status and x402 payment details) but lists no required credentials or permissions. It implicitly requires access to the StablePay runtime (which itself likely needs credentials) and the ability to contact a local merchant backend. Asking the agent to perform payments without declaring the required credential scope (or requiring user confirmation flows) is disproportionate and should be made explicit.
Persistence & Privilege
The skill does not request always:true, does not install components, and is user-invocable only. It does not attempt to modify agent configuration or other skills. Autonomous invocation is allowed (platform default) but does not appear combined with other privileges here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install showmethemoney-pro
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /showmethemoney-pro 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
**ShowMeTheMoney Pro 1.1.0** - Updated x402 payment handling: now parses payment parameters from the first item in the backend's accepts array (accepts[0]) and performs required unit conversion for price. - Clarified that all payment values (`skill_did`, `price`, `currency`, `facilitator_url`) must be extracted from backend response; hardcoded or fallback values are never used. - Added guidance to present the `unlocked_store` from backend 200 responses and offer research report browsing/purchase to the user; each report requires a separate x402 payment flow. - Simplified and refocused documentation to highlight the main workflow and remove redundant configuration/precondition sections. - Reiterated that the backend is the sole authority for access and payment requirements; local state or guesses must not be used.
v1.0.6
- The merchant backend is now the only source of truth for all payment parameters (e.g., skill_did, price, currency, payment_endpoint). - All hardcoded defaults for payment configuration have been removed; you must use values returned by the backend's 402 response. - Rejects all attempts to run or pay for the premium action using fallback defaults. - Clarifies safety, workflow, and configuration to prevent any payment or unlock without valid backend response. - Shows errors if backend is unreachable or does not provide expected payment details.
v1.0.5
- Updated default merchant settings: new skill_did and reduced default_price_usdc from 12.00 to 10.00. - skill_did changed to did:solana:4p8F5YAJM8fdrNyvWfb3p6XHx8rboFVV3xn279VXo2j7. - default_price_usdc changed to 10.00 and currency remains USDC. - All other workflow details and guidance remain unchanged.
v1.0.4
- Updated the default skill metadata: skill_name, skill_did, and default_price_usdc. - skill_name changed to showmethemoney-pro. - skill_did updated to did:solana:EBv2e3SjceE6dkxSs5qbbhtFVvsrux5dgmM2cAJw9RsF. - default_price_usdc increased from 1.00 to 12.00. - Documentation in SKILL.md revised to reflect new default merchant settings.
v1.0.3
- Updated the default merchant `skill_did` to `did:solana:6vhFRAY7FBruLdvtztAUfne1F77aFsVCHhwPuu4JAoox` in documentation. - No other workflow or logic changes documented.
v1.0.2
- Updated the default skill_did in merchant settings. - Changed the stablepay_gateway_base_url default from a local address to https://ai.wenfu.cn. - No changes to workflow, safety, or contract; only fixed merchant configuration details.
v1.0.1
ShowMeTheMoney Pro version 1.0.1 focuses the skill on a single backend-verified premium action with fixed configuration. - Sets fixed defaults for merchant settings (skill name, DID, price, currency, endpoints) - Simplifies workflow to require only runtime status, wallet, and DID registration (not payment policy build) - Treats the merchant backend’s verification and payment requirements as the sole authority for premium access - Specifies only the `/execute?agent_did=<buyer_did>` endpoint as the valid premium action route - Clarifies success criteria: backend must return proof token and verified status after successful payment and verification - Narrows scope and removes placeholders/developer plumbing, tailoring docs to the live premium action flow only
v1.0.0
**Initial release of ShowMeTheMoney Pro: A strongly-protected paid skill with verified StablePay integration.** - Requires StablePay payment and backend verification before executing any premium capability. - Enforces preflight wallet, DID registration, and payment policy setup before access. - Handles payment workflow, including user guidance, payment confirmation, and retry after purchase. - Relies exclusively on backend and StablePay for access verification—local state is never trusted. - Provides clear guidance and robust safety for merchants and users integrating StablePay.
元数据
Slug showmethemoney-pro
版本 1.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 8
常见问题

showmethemoney-pro 是什么?

execute the paid showmethemoney premium action through the merchant backend. use when the user wants to unlock or run the protected showmethemoney capability... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 196 次。

如何安装 showmethemoney-pro?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install showmethemoney-pro」即可一键安装,无需额外配置。

showmethemoney-pro 是免费的吗?

是的,showmethemoney-pro 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

showmethemoney-pro 支持哪些平台?

showmethemoney-pro 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 showmethemoney-pro?

由 Bubblevan(@bubblevan)开发并维护,当前版本 v1.1.0。

💬 留言讨论