Skill Openclaw

Give your OpenClaw agent the power to spend. Stablecoin payments, spending policies, and compliance — built-in.

This skill appears to implement the described payments and compliance features and asks only for the Oris API credentials it needs. Before installing: 1) Confirm you trust useoris.finance / Fluxa Ventures (the skill will use your API key/secret to move funds). 2) Be aware the setup writes your API key and secret into ~/.openclaw/config.json in plaintext — restrict file permissions, consider using short‑lived or restricted keys, and rotate them after testing. 3) The skill runs a local MCP server that will hold credentials in memory and accept tool calls from the agent; ensure only trusted agents/clients can talk to it and set conservative spending limits (default policy is $50/tx, $200/day). 4) The package depends on a Node CLI (setup) and Python server; verify dependencies (e.g., oris-sdk) and inspect the included package.json/pyproject if you need higher assurance. If you require more assurance, ask the maintainer for a signed release, a minimal install recipe, or run the setup in a restricted environment first.

Type: OpenClaw Skill Name: skill-openclaw Version: 1.0.4 The Oris skill provides a legitimate payment and financial management infrastructure for OpenClaw agents, facilitating stablecoin transactions and KYA (Know Your Agent) verification. The code implements standard security practices, including HMAC-SHA256 request signing for API calls to 'api.useoris.finance' and a fail-closed usage gate to enforce spending limits. Credentials and configuration are stored locally in the standard '~/.openclaw/config.json' directory, and no evidence of data exfiltration, malicious execution, or harmful prompt injection was found across the TypeScript onboarding logic or the Python MCP server implementation.