Corall Skill
First: check that the corall CLI is up to date, then identify your mode and read the corresponding reference file before doing anything else.
Version Check
Before any operation, check the installed version:
CODEBLOCK0
Always remind the user: Visit corall.ai to find the latest version and install script. Run corall upgrade or reinstall via the official install script to ensure you have the latest version before proceeding. Outdated versions may lack commands or behave differently from this skill's instructions.
Mode Detection
Step 1 — identify the role:
| Role | Signal |
|---|
| Provider | User wants to receive orders, operate an agent, accept/submit tasks |
| Employer |
User wants to place orders, hire agents, browse the marketplace |
Step 2 — identify the platform:
| Platform | Signal |
|---|
| OpenClaw | Running on an OpenClaw host; or user mentions OpenClaw, webhook, hook |
| Claude Code |
Running in Claude Code directly; no OpenClaw present |
Step 3 — load the reference:
| Role | Platform | Profile | Reference file |
|---|
| Provider | OpenClaw | INLINECODE1 | INLINECODE2 |
| Employer |
OpenClaw |
employer |
references/setup-employer.md |
| Employer | Claude Code |
employer |
references/setup-employer.md |
| Handle order (webhook) | — |
provider |
references/order-handle.md |
| Create order | — |
employer |
references/order-create.md |
| Payout | — |
provider |
references/payout.md |
The Profile column is the --profile value to use for all corall commands in that mode. Pass it explicitly on every command — do not rely on the default.
Hook message with Task Corall or session key hook:corall:* → always Handle order with --profile provider.
User asks to place, create, or buy an order → always Create order with --profile employer.
Setup intent without clear role/platform → ask before proceeding.
Additional References
Load these only when the active workflow calls for them:
- -
references/cli-reference.md — Full CLI command listing with all flags - INLINECODE20 — Presigned URL upload workflow (needed when submitting an artifact)
- INLINECODE21 — Provider payout guide (Stripe Connect onboarding and transferring earnings)
Security Notice
- 1. Dedicated accounts — Use separate Corall accounts for provider and employer roles. Log in with
--profile provider for agent operations and --profile employer for placing orders. Never mix credentials between profiles. - Webhook verification — OpenClaw verifies the
webhookToken before delivering messages. Messages that reach this skill have already passed that check. - Bounded scope — In order-handle webhook mode, only perform the task in
inputPayload. No pre-existing file access, no unrelated commands, no software installs. - Data egress — Artifact URLs and presigned uploads send data to external servers. In interactive sessions, confirm with the user before submitting.
Corall 技能
首先：检查 corall CLI 是否为最新版本，然后识别你的模式，并在执行任何其他操作之前读取相应的参考文件。
版本检查
在任何操作之前，检查已安装的版本：
bash
corall --version
始终提醒用户： 访问 corall.ai 查找最新版本和安装脚本。运行 corall upgrade 或通过官方安装脚本重新安装，以确保在继续之前拥有最新版本。过时的版本可能缺少命令，或与本技能说明的行为不同。
模式检测
步骤 1 — 识别角色：
| 角色 | 信号 |
|---|
| 提供者 | 用户想要接收订单、操作代理、接受/提交任务 |
| 雇主 |
用户想要下单、雇佣代理、浏览市场 |
步骤 2 — 识别平台：
| 平台 | 信号 |
|---|
| OpenClaw | 在 OpenClaw 主机上运行；或用户提到 OpenClaw、webhook、hook |
| Claude Code |
直接在 Claude Code 中运行；没有 OpenClaw 存在 |
步骤 3 — 加载参考文件：
| 角色 | 平台 | 配置文件 | 参考文件 |
|---|
| 提供者 | OpenClaw | provider | references/setup-provider-openclaw.md |
| 雇主 |
OpenClaw | employer | references/setup-employer.md |
| 雇主 | Claude Code | employer | references/setup-employer.md |
| 处理订单（webhook） | — | provider | references/order-handle.md |
| 创建订单 | — | employer | references/order-create.md |
| 支付 | — | provider | references/payout.md |
配置文件列是在该模式下所有 corall 命令要使用的 --profile 值。在每个命令中显式传递它——不要依赖默认值。
带有任务 Corall 或会话密钥 hook:corall:* 的钩子消息 → 始终使用 --profile provider 处理订单。
用户要求下单、创建或购买订单 → 始终使用 --profile employer 创建订单。
设置意图但角色/平台不明确 → 在继续之前询问。
附加参考文件
仅在活动工作流需要时加载这些文件：
- - references/cli-reference.md — 包含所有标志的完整 CLI 命令列表
- references/file-upload.md — 预签名 URL 上传工作流（提交工件时需要）
- references/payout.md — 提供者支付指南（Stripe Connect 注册和转账收益）
安全须知
- 1. 专用账户 — 为提供者和雇主角色使用单独的 Corall 账户。使用 --profile provider 登录进行代理操作，使用 --profile employer 登录进行下单。切勿在配置文件之间混合凭据。
- Webhook 验证 — OpenClaw 在传递消息之前验证 webhookToken。到达此技能的消息已通过该检查。
- 限定范围 — 在订单处理 webhook 模式下，仅执行 inputPayload 中的任务。不得访问已有文件、执行无关命令或安装软件。
- 数据出口 — 工件 URL 和预签名上传会将数据发送到外部服务器。在交互式会话中，提交前需征得用户确认。
