showmethemoney-lite
v1.0.0paid stablepay demo skill for openclaw. use when the user wants to try a monetized skill flow with a visible price, stablepay wallet setup, and in-chat payme...
⭐ 0· 54·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (StablePay paid demo) align with the SKILL.md: it instructs the agent to use StablePay runtime calls, a local wallet, and an optional demo backend. No unrelated environment variables, binaries, or install steps are requested.
Instruction Scope
Instructions stay within the paid-demo scope (preflight checks, wallet creation, payment API calls, handling HTTP 402, requiring backend confirmation). Caution: the skill can initiate real payments and create/modify local wallet state if the StablePay plugin is present; it does require explicit user request for the paid action and states not to invent purchases.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk by the skill package itself.
Credentials
No environment variables, credentials, or config paths are requested. The skill relies on the presence of the StablePay plugin and a local wallet runtime, which is coherent for its purpose.
Persistence & Privilege
always is false and the skill does not request persistent or elevated platform privileges or modifications to other skills' configurations.
Assessment
This skill appears internally consistent for a demo payment flow, but before installing consider: 1) it can trigger real payments — only run paid demo actions after explicit user consent; 2) it relies on the StablePay plugin and local wallet runtime — verify those components' provenance and trustworthiness (a compromised plugin could misuse keys or initiate payments); 3) placeholders in SKILL.md must be replaced before production use, and the skill itself is described as 'weak-protection' (not tamper-resistant) so do not treat it as a secure commercial payment integration; 4) test in a sandbox or with test funds first and monitor any transactions; 5) if you need strict backend enforcement or strong anti-tamper guarantees, choose a different skill or require server-side verification. If you want higher confidence about safety, ask the publisher for the real demo endpoints, the StablePay plugin source, and any backend implementation details.Like a lobster shell, security has layers — review code before you run it.
latestvk97czmx0yxhh1hd32rz4hyfj7x84pqdt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.