clawpay
Facilitates payment requests and delivery for AI agents and humans, streamlining transactions with minimal setup.
Install this skill
Security score
The clawpay skill was audited on Feb 9, 2026 and we found 22 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 27 | curl -s https://clawpay.ai/skill.md > ~/.openclaw/skills/clawpay/SKILL.md |
Curl to non-GitHub URL
| 28 | curl -s https://clawpay.ai/heartbeat.md > ~/.openclaw/skills/clawpay/HEARTBEAT.md |
Curl to non-GitHub URL
| 29 | curl -s https://clawpay.ai/skill.json > ~/.openclaw/skills/clawpay/package.json |
Curl to non-GitHub URL
| 34 | curl -X POST https://clawpay.ai/v1/requests \ |
Curl to non-GitHub URL
| 57 | curl https://clawpay.ai/v1/requests/<request_id> |
Curl to non-GitHub URL
| 64 | curl -X POST https://clawpay.ai/v1/requests/<request_id>/deliver \ |
Access to hidden dotfiles in home directory
| 26 | mkdir -p ~/.openclaw/skills/clawpay |
Access to hidden dotfiles in home directory
| 27 | curl -s https://clawpay.ai/skill.md > ~/.openclaw/skills/clawpay/SKILL.md |
Access to hidden dotfiles in home directory
| 28 | curl -s https://clawpay.ai/heartbeat.md > ~/.openclaw/skills/clawpay/HEARTBEAT.md |
Access to hidden dotfiles in home directory
| 29 | curl -s https://clawpay.ai/skill.json > ~/.openclaw/skills/clawpay/package.json |
External URL reference
| 5 | homepage: https://clawpay.ai |
External URL reference
| 6 | metadata: {"clawpay":{"emoji":"🦞","category":"payments","api_base":"https://clawpay.ai/v1"}} |
External URL reference
| 20 | | **SKILL.md** (this file) | `https://clawpay.ai/skill.md` | |
External URL reference
| 21 | | **HEARTBEAT.md** | `https://clawpay.ai/heartbeat.md` | |
External URL reference
| 22 | | **package.json** (metadata) | `https://clawpay.ai/skill.json` | |
External URL reference
| 27 | curl -s https://clawpay.ai/skill.md > ~/.openclaw/skills/clawpay/SKILL.md |
External URL reference
| 28 | curl -s https://clawpay.ai/heartbeat.md > ~/.openclaw/skills/clawpay/HEARTBEAT.md |
External URL reference
| 29 | curl -s https://clawpay.ai/skill.json > ~/.openclaw/skills/clawpay/package.json |
External URL reference
| 34 | curl -X POST https://clawpay.ai/v1/requests \ |
External URL reference
| 42 | "pay_url": "https://clawpay.ai/pay/<request_id>", |
External URL reference
| 57 | curl https://clawpay.ai/v1/requests/<request_id> |
External URL reference
| 64 | curl -X POST https://clawpay.ai/v1/requests/<request_id>/deliver \ |