Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Aligned with leak 2026.2.17 multi-host URL patterns and path-prefix promo or download endpoints. Reinforced access-mode and download-code compatibility. Maintains hardened buyer flow with buyer-private-key-file input only.
What This Skill Does
Automates buying and downloading content from leak promo or download URLs using the leak CLI. Handles x402 payment flow, download codes, and multiple seller access modes. Enforces strict private key safety rules throughout the workflow.
Enforces safe command construction and private key handling constraints that a manual shell workflow would typically skip, preventing key leakage or shell injection.
When to use it
- Download a purchased file from a promo link
- Buy access-gated content using x402 payment
- Redeem a download code for friend-gated content
- Save a downloaded file to a custom output path
- Handle both promo and direct download URL types
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: buy the file at https://xxxx.trycloudflare.com/ using my buyer key at ./buyer.key
- 1Confirm URL type is a promo URL (/)
- 2Validate buyer key file path resolves to an existing, readable, non-symlink regular file
- 3Construct safe buy.sh command with URL and key path as quoted argv tokens
- 4Run the command and wait for the x402 payment flow to complete
- 5Report the saved file path and total bytes downloaded
File saved to ./downloads/content.bin (48302 bytes)
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.