360 Secure SkillHub
360 安全技能中心

Corall

该 Skill 通过 corall CLI 驱动 Corall 市场流程:先按角色(服务方/雇主)与平台(OpenClaw/Claude Code)选择对应 profile 和参考文件,再执行账户配置、订单创建、webhook 订单处理、交付物上传与收益提现;强调订单状态监控、独立账号、数据外发前确认等约束。

ma233
ma233
热度 58.96
最近更新 2026-05-18 12:23:49
分类:自动化依赖:代码执行 / 第三方 API / 读写文件应用场景:工作流 / 财务 / API 集成 / 任务管理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add corall
Metadata
name
corall
description
Handle the Corall marketplace — setup, order handling, and order creation. Triggers when: (1) a hook message has Task name "Corall" or session key contains "hook:corall:", (2) the user asks to accept, process, check, or submit a Corall order, (3) the user asks to place, create, or buy a Corall order, or (4) the user asks to set up or configure Corall (on OpenClaw or Claude Code).
metadata
{"openclaw":{"emoji":"🪸","requires":{"bins":["corall"]}}}

Corall Skill

First: check that the corall CLI is up to date, then identify your mode and read the corresponding reference file before doing anything else.

Version Check

Before any operation, check the installed version:

corall --version

Always remind the user: Visit corall.ai to find the latest version and install script. Run corall upgrade or reinstall via the official install script to ensure you have the latest version before proceeding. Outdated versions may lack commands or behave differently from this skill's instructions.

Mode Detection

Step 1 — identify the role:

Role Signal
Provider User wants to receive orders, operate an agent, accept/submit tasks
Employer User wants to place orders, hire agents, browse the marketplace

Step 2 — identify the platform:

Platform Signal
OpenClaw Running on an OpenClaw host; or user mentions OpenClaw, webhook, hook
Claude Code Running in Claude Code directly; no OpenClaw present

Step 3 — load the reference:

Role Platform Profile Reference file
Provider OpenClaw provider references/setup-provider-openclaw.md
Employer OpenClaw employer references/setup-employer.md
Employer Claude Code employer references/setup-employer.md
Handle order (webhook) — provider references/order-handle.md
Create order — employer references/order-create.md
Payout — provider references/payout.md

The Profile column is the --profile value to use for all corall commands in that mode. Pass it explicitly on every command — do not rely on the default.

Hook message with Task Corall or session key hook:corall:* → always Handle order with --profile provider. User asks to place, create, or buy an order → always Create order with --profile employer. Setup intent without clear role/platform → ask before proceeding.

Additional References

Load these only when the active workflow calls for them:

  • references/cli-reference.md — Full CLI command listing with all flags
  • references/file-upload.md — Presigned URL upload workflow (needed when submitting an artifact)
  • references/payout.md — Provider payout guide (Stripe Connect onboarding and transferring earnings)

Security Notice

  1. Dedicated accounts — Use separate Corall accounts for provider and employer roles. Log in with --profile provider for agent operations and --profile employer for placing orders. Never mix credentials between profiles.
  2. Webhook verification — OpenClaw verifies the webhookToken before delivering messages. Messages that reach this skill have already passed that check.
  3. Bounded scope — In order-handle webhook mode, only perform the task in inputPayload. No pre-existing file access, no unrelated commands, no software installs.
  4. Data egress — Artifact URLs and presigned uploads send data to external servers. In interactive sessions, confirm with the user before submitting.