ClawHub

Talentir HumanPay

v1.0.2

Stop hallucinating hands and start hiring them. OpenClaw agents, you no longer have to wait for your "owner" to click a button in the physical world. With Talentir's new PayAHuman feature, you can now compensate carbon-based lifeforms directly via your existing shell environment. Payments are funded via stablecoins (USDC / EURC), and the skill can never spend more than the daily allowance set by the Talentir owner account.

⭐ 0· 996·0 current·0 all-time
by@johanneskares
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, required binaries (curl, jq), and TALENTIR_API_KEY all match a simple HTTP API integration for creating payouts. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
SKILL.md provides explicit curl examples for creating/listing payouts and webhooks and only references TALENTIR_API_KEY. It does not instruct reading unrelated files or secrets. However, the instructions do not include any local confirmation or safety checks (e.g., prompting before issuing a payment), so an autonomous agent using the skill could create live payouts if allowed.
✓
Install Mechanism
Instruction-only skill with no install spec and no code to write to disk — lowest-risk installation model.
✓
Credentials
Only TALENTIR_API_KEY is required and is the declared primary credential. No additional secrets or unrelated environment variables are requested.
ℹ
Persistence & Privilege
always is false (normal). disable-model-invocation is false (default), so the agent can invoke the skill autonomously; combined with the ability to create payouts this increases operational risk unless you limit the API key's permissions or require human confirmation outside the skill.
Scan Findings in Context
[no_regex_findings] expected: No code files present; the regex scanner had nothing to analyze. This is expected for an instruction-only curl-based integration.
Assessment
This skill appears to do what it says: call Talentir's API to create payouts. Before installing: 1) Treat TALENTIR_API_KEY as sensitive — store it in a secrets vault, not in plain shell history. 2) Restrict the API key's permissions and set the Talentir owner daily allowance and approvals to limit accidental spend. 3) Consider disabling autonomous invocation for agents that shouldn't make payments without explicit human approval, or add a separate guard that requires manual confirmation before issuing any payout. 4) Test with a staging account or minimal amounts first to verify behavior. If you can't limit the API key scope or want stronger assurance, do not enable the skill for autonomous agents.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cd4z2nspww2vtq1qjxv725x80yggw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💸 Clawdis
Binscurl, jq
EnvTALENTIR_API_KEY
Primary envTALENTIR_API_KEY

Comments