Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Buy and download leak content from promo or download links using a preinstalled leak CLI.
Buy and download leak content from promo or download links using a preinstalled leak CLI.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
This skill operates leak buy workflows only: Accept a promo URL (/) or download URL (/download). Include download-code when required by the seller access mode. Pay via x402 flow only when required by the seller access mode. Save downloaded file locally.
Never ask for raw private key text in chat. Never create buyer keys from this skill. Allow only --buyer-private-key-file <path>. Block raw-key argument mode and stdin key mode. Never print private key material. Never construct shell commands by concatenating raw user input. Pass URL/path as quoted argv tokens, never through eval or sh -c. Reject URL/key path values with whitespace/control characters. Require buyer key path to resolve to an existing readable regular file (non-symlink).
Require leak binary on PATH. Do not execute npx or dynamic package install at runtime.
Leak promo or download URL. Buyer key file path (required only when payment is required). Download code (required only for download-code modes).
Use this pattern: PROMO_URL="https://xxxx.trycloudflare.com/" BUYER_KEY_FILE="./buyer.key" DOWNLOAD_CODE="friends-only" bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" --download-code "$DOWNLOAD_CODE" Do not use placeholder interpolation like <...> directly in executable shell strings.
bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" When download-code is required: bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --download-code "$DOWNLOAD_CODE" --buyer-private-key-file "$BUYER_KEY_FILE"
bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" --out ./downloads/myfile.bin bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" --basename myfile
Confirm URL type (/ or /download). Ask for buyer key file path when payment is required. Ask for download code when download-code is required. Validate URL/key path safety constraints and run with quoted argv tokens. Report saved file path and bytes downloaded.
leak missing: install: npm i -g leak-cli key mode errors: use only --buyer-private-key-file <path>
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.