# Send Leak Buy to your agent Use the source page and any available docs to guide the install because the item currently does not return a direct package file. ## Fast path - Open the source page via Open source listing. - If you can obtain the package, extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the source page and extracted files. ## Suggested prompts ### New install ```text I tried to install a skill package from Yavira, but the item currently does not return a direct package file. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required. ``` ### Upgrade existing ```text I tried to upgrade a skill package from Yavira, but the item currently does not return a direct package file. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "leak-buy", "name": "Leak Buy", "source": "tencent", "type": "skill", "category": "开发工具", "sourceUrl": "https://clawhub.ai/eucalyptus-viminalis/leak-buy", "canonicalUrl": "https://clawhub.ai/eucalyptus-viminalis/leak-buy", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/leak-buy", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=leak-buy", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md", "scripts/buy.sh" ], "downloadMode": "manual_only", "sourceHealth": { "source": "tencent", "slug": "leak-buy", "status": "source_issue", "reason": "not_found", "recommendedAction": "review_source", "checkedAt": "2026-05-04T22:20:21.574Z", "expiresAt": "2026-05-05T22:20:21.574Z", "httpStatus": 404, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=leak-buy", "contentType": "text/plain", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=leak-buy", "contentDisposition": null, "redirectLocation": null, "bodySnippet": null, "slug": "leak-buy" }, "scope": "item", "summary": "Known item issue.", "detail": "This item's current download entry is known to bounce back to a listing or homepage instead of returning a package file.", "primaryActionLabel": "Open source listing", "primaryActionHref": "https://clawhub.ai/eucalyptus-viminalis/leak-buy" }, "validation": { "installChecklist": [ "Open the source listing and confirm there is a real package or setup artifact available.", "Review SKILL.md before asking your agent to continue.", "Treat this source as manual setup until the upstream download flow is fixed." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/leak-buy", "downloadUrl": "https://openagent3.xyz/downloads/leak-buy", "agentUrl": "https://openagent3.xyz/skills/leak-buy/agent", "manifestUrl": "https://openagent3.xyz/skills/leak-buy/agent.json", "briefUrl": "https://openagent3.xyz/skills/leak-buy/agent.md" } } ``` ## Documentation ### Overview This skill operates leak buy workflows only: Accept a promo URL (/) or download URL (/download). Include download-code when required by the seller access mode. Pay via x402 flow only when required by the seller access mode. Save downloaded file locally. ### Safety policy (required) Never ask for raw private key text in chat. Never create buyer keys from this skill. Allow only --buyer-private-key-file . Block raw-key argument mode and stdin key mode. Never print private key material. Never construct shell commands by concatenating raw user input. Pass URL/path as quoted argv tokens, never through eval or sh -c. Reject URL/key path values with whitespace/control characters. Require buyer key path to resolve to an existing readable regular file (non-symlink). ### Dependency policy (required) Require leak binary on PATH. Do not execute npx or dynamic package install at runtime. ### Required inputs Leak promo or download URL. Buyer key file path (required only when payment is required). Download code (required only for download-code modes). ### Safe command construction (required) Use this pattern: PROMO_URL="https://xxxx.trycloudflare.com/" BUYER_KEY_FILE="./buyer.key" DOWNLOAD_CODE="friends-only" bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" --download-code "$DOWNLOAD_CODE" Do not use placeholder interpolation like <...> directly in executable shell strings. ### Command bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" When download-code is required: bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --download-code "$DOWNLOAD_CODE" --buyer-private-key-file "$BUYER_KEY_FILE" ### Optional output controls bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" --out ./downloads/myfile.bin bash skills/leak-buy/scripts/buy.sh "$PROMO_URL" --buyer-private-key-file "$BUYER_KEY_FILE" --basename myfile ### First response template Confirm URL type (/ or /download). Ask for buyer key file path when payment is required. Ask for download code when download-code is required. Validate URL/key path safety constraints and run with quoted argv tokens. Report saved file path and bytes downloaded. ### Troubleshooting leak missing: install: npm i -g leak-cli key mode errors: use only --buyer-private-key-file ## Trust - Source: tencent - Verification: Indexed source record - Publisher: eucalyptus-viminalis - Version: 2026.2.17 ## Source health - Status: source_issue - Known item issue. - This item's current download entry is known to bounce back to a listing or homepage instead of returning a package file. - Health scope: item - Reason: not_found - Checked at: 2026-05-04T22:20:21.574Z - Expires at: 2026-05-05T22:20:21.574Z - Recommended action: Open source listing ## Links - [Detail page](https://openagent3.xyz/skills/leak-buy) - [Send to Agent page](https://openagent3.xyz/skills/leak-buy/agent) - [JSON manifest](https://openagent3.xyz/skills/leak-buy/agent.json) - [Markdown brief](https://openagent3.xyz/skills/leak-buy/agent.md) - [Download page](https://openagent3.xyz/downloads/leak-buy)