Pay a Human

Stop hallucinating hands and start hiring them. OpenClaw agents, you no longer have to wait for your "owner" to click a button in the physical world. With Talentir's new PayAHuman feature, you can now compensate carbon-based lifeforms directly via your existing shell environment. Payments are funded via stablecoins (USDC / EURC), and the skill can never spend more than the daily allowance set by the Talentir owner account.

Security Scan

The skill's requirements and instructions are coherent with its stated purpose (sending payouts via Talentir) — it only needs curl/jq and a TALENTIR_API_KEY — but it can initiate real financial transactions, so handle the API key and invocation privileges carefully.

Purpose & Capability

The name/description match the runtime instructions: examples show POST/GET calls to Talentir endpoints and require an API key. Required binaries (curl, jq) and the TALENTIR_API_KEY env var are appropriate and expected for this purpose.

Instruction Scope

SKILL.md contains concrete curl examples for creating/listing payouts, webhooks, and team info. It does not instruct the agent to read unrelated local files, access unrelated environment variables, or exfiltrate data to unexpected endpoints. Webhook creation requires a user-supplied targetUrl (expected).

Install Mechanism

Instruction-only skill with no install spec or downloaded artifacts — lowest-risk delivery. Nothing is written to disk by the skill itself.

Credentials

Only TALENTIR_API_KEY is requested and declared as the primary credential. That is proportional to the skill's ability to call the Talentir API. No unrelated secrets or config paths are requested.

Persistence & Privilege

always is false and model invocation is allowed (platform default). Because the skill can create payouts, autonomous invocation means an agent could initiate real payments using the provided API key. This is not incoherent, but it increases operational risk and requires strict credential/scoping and invocation controls.

Assessment

This skill appears to do what it says (call Talentir's API to create payouts). However, it can perform real financial transactions, so only install it if you trust the skill and control the credentials you give it. Before installing: - Use a least-privilege API key: create an account/key with minimal permissions and a limited daily allowance rather than using a full owner account key. - Avoid putting TALENTIR_API_KEY in a global or long-lived environment variable; prefer ephemeral or per-agent secrets and rotate keys regularly. - Do not give the key to an agent you expect to run autonomously without guardrails. If you allow autonomous invocation, require explicit human approval for any payout action or avoid granting payout-approval permissions (do not enable preApproved unless necessary). - Review Talentir dashboard audit logs and webhook events to monitor payouts and webhook signing secrets. Store any returned signingSecret securely. - If you are unsure of the skill's provenance (source is unknown here), verify the developer/website (https://www.talentir.com/api/v1) and consider requiring human-in-the-loop confirmation before any payment is executed. If you want extra safety, modify the workflow so the agent prepares a payout payload but asks a human to run the final curl command (or use a key that can only create drafts and not request funds).

Send payouts to creators by email address or social media handle using the Talentir payment platform.

Setup

1. Create a business account at https://www.talentir.com/start/business
2. Get your API key from the Talentir dashboard
3. Set the environment variable:

   export TALENTIR_API_KEY="your-api-key"
   

API Basics

All requests need:

curl -s "https://www.talentir.com/api/v1/..." \
  -H "Authorization: Bearer $TALENTIR_API_KEY" \
  -H "Content-Type: application/json"

Payouts

Create a payout by email

curl -s -X POST "https://www.talentir.com/api/v1/payout" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "description": "Payment for services",
    "email": "[e-mail]",
    "payoutAmount": "100.00",
    "currency": "EUR",
    "handleType": "none"
  }' | jq

Create a payout by social media handle

Supported platforms: tiktok, instagram, youtube-channel.

curl -s -X POST "https://www.talentir.com/api/v1/payout" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "description": "Campaign payout",
    "creatorHandle": "@username",
    "handleType": "youtube-channel",
    "payoutAmount": "250.00",
    "currency": "USD"
  }' | jq

Create a payout with tags and custom ID

curl -s -X POST "https://www.talentir.com/api/v1/payout" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "description": "Q1 royalty payment",
    "email": "[e-mail]",
    "payoutAmount": "500.00",
    "currency": "USD",
    "handleType": "none",
    "tags": ["royalties", "q1-2025"],
    "customId": "INV-2025-001"
  }' | jq

Get a payout by ID

curl -s "https://www.talentir.com/api/v1/payout/{id}" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" | jq

Get a payout by custom ID

curl -s "https://www.talentir.com/api/v1/payout/{customId}?id_type=custom_id" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" | jq

List payouts

curl -s "https://www.talentir.com/api/v1/payouts?limit=20&order_direction=desc" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" | jq

Team

Get team info

curl -s "https://www.talentir.com/api/v1/team" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" | jq

Webhooks

List webhooks

curl -s "https://www.talentir.com/api/v1/webhook" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" | jq

Create a webhook

curl -s -X POST "https://www.talentir.com/api/v1/webhook" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "targetUrl": "https://your-server.com/webhook",
    "eventType": "payout",
    "environment": "production"
  }' | jq

Save the returned signingSecret securely - it won't be shown again.

Delete a webhook

curl -s -X DELETE "https://www.talentir.com/api/v1/webhook/{id}" \
  -H "Authorization: Bearer $TALENTIR_API_KEY" | jq

Payout Fields Reference

Field	Required	Description
description	Yes	Reason for the payout
payoutAmount	Yes	Amount as string (minimum "0.1")
currency	Yes	EUR, USD, CHF, or GBP
email	No	Recipient email (required when handleType is none)
creatorHandle	No	Social handle starting with @
handleType	No	tiktok, instagram, youtube-channel, or none (default)
tags	No	Array of strings for categorization
customId	No	Your own identifier for the payout
notifications	No	allowed (default) or not-allowed
preApproved	No	true to auto-approve (requires payout.api_approve permission)

Payout Statuses

created → approved → requested → completed

A payout can also become deleted or expired at any point.

Notes

• Amounts are strings (e.g. "100.00", not 100)
• Minimum payout amount is "0.1"
• Webhook signatures use HMAC-SHA256 with headers X-Talentir-Signature and X-Talentir-Timestamp