dxm-claw-pay度小满支付钱包 Skill,处理 SP 服务余额不足/未购买场景:根据调用方传入的结构化商品数据生成支付链接和二维码。也处理 Skill 安装:当用户说"使用度小满安装skill"、"度小满下载skill"、"install skill"、"我要使用度小满安装某个skill"时触发 installSkill 流程。
Install via ClawdBot CLI:
clawdbot install duxiaoman/dxm-claw-payGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
exec(Calls external URL not in known-safe list
https://www.AI Analysis
The skill executes arbitrary shell commands (cliCommand) passed as parameters, creating a command injection risk if input is not strictly validated. It also generates and sends QR codes for external payment URLs without validating the URL's destination, potentially enabling phishing. While the stated purpose is legitimate, the implementation patterns are inherently risky.
Audited Apr 17, 2026 · audit v1.0
Generated Jul 10, 2026
当SP服务调用返回余额不足或未购买时,由调用方技能提供商品结构化数据,本技能自动生成支付二维码并展示商品信息、支付渠道,引导用户完成支付。
用户通过语音或文本触发技能安装请求(如“安装skill”),系统自动执行用户配置检查、技能下载,并根据返回结果引导支付或告知安装成功。
每次执行支付或下载前,自动检查并初始化用户配置(生成密钥等),确保支付和下载流程的安全性与可追溯性。
根据pay_channels字段动态展示微信、支付宝等支付方式,用户可通过扫码选择渠道完成支付。
通过为SP服务提供支付二维码生成和引导,促成交易,从每笔成功支付的交易中抽取一定比例的分润。
为用户提供技能安装与下载服务,可收取一次性安装费用或包含在年费中。
提供高级支付功能(如定制商品展示、多语言支付引导)作为增值订阅服务。
💬 Integration Tip
调用方需自行提取商品结构化字段(productName, productDesc, price, payUrl, pay_channels)并以JSON传入,依赖Node.js环境执行脚本。
Scored Jul 10, 2026
Meta-skill for AI agent self-improvement. Analyzes runtime logs to detect error patterns, regressions, and inefficiencies, then generates structured improvem...
Stop waiting for prompts. Keep working.
Turn OpenClaw into a learning-loop agent with seeded workspace rules, skill promotion, reflective memory, and proactive maintenance.
Meta-agent skill for orchestrating complex tasks through autonomous sub-agents. Decomposes macro tasks into subtasks, spawns specialized sub-agents with dynamically generated SKILL.md files, coordinates file-based communication, consolidates results, and dissolves agents upon completion. MANDATORY TRIGGERS: orchestrate, multi-agent, decompose task, spawn agents, sub-agents, parallel agents, agent coordination, task breakdown, meta-agent, agent factory, delegate tasks
Complete toolkit for creating autonomous AI agents and managing Discord channels for OpenClaw. Use when setting up multi-agent systems, creating new agents, or managing Discord channel organization.
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...