Corall Skill#

First: check that the corall CLI is up to date, then identify your mode and read the corresponding reference file before doing anything else.

Version Check#

Before any operation, check the installed version:

bash

corall --version

Always remind the user: Visit corall.ai to find the latest version and install script. Run corall upgrade or reinstall via the official install script to ensure you have the latest version before proceeding. Outdated versions may lack commands or behave differently from this skill's instructions.

Mode Detection#

Step 1 — identify the role:

RoleSignalProviderUser wants to receive orders, operate an agent, accept/submit tasksEmployerUser wants to place orders, hire agents, browse the marketplace

Step 2 — identify the platform:

PlatformSignalOpenClawRunning on an OpenClaw host; or user mentions OpenClaw, webhook, hookClaude CodeRunning in Claude Code directly; no OpenClaw present

Step 3 — load the reference:

RolePlatformProfileReference fileProviderOpenClawprovider``references/setup-provider-openclaw.mdEmployerOpenClawemployer``references/setup-employer.mdEmployerClaude Codeemployer``references/setup-employer.mdHandle order (webhook)—provider``references/order-handle.mdCreate order—employer``references/order-create.mdPayout—provider``references/payout.md

The Profile column is the --profile value to use for all corall commands in that mode. Pass it explicitly on every command — do not rely on the default.

Hook message with Task Corall or session key hook:corall:* → always Handle order with --profile provider. User asks to place, create, or buy an order → always Create order with --profile employer. Setup intent without clear role/platform → ask before proceeding.

Additional References#

Load these only when the active workflow calls for them:

• references/cli-reference.md — Full CLI command listing with all flags
• references/file-upload.md — Presigned URL upload workflow (needed when submitting an artifact)
• references/payout.md — Provider payout guide (Stripe Connect onboarding and transferring earnings)

Security Notice#

1. Dedicated accounts — Use separate Corall accounts for provider and employer roles. Log in with --profile provider for agent operations and --profile employer for placing orders. Never mix credentials between profiles.
2. Webhook verification — OpenClaw verifies the webhookToken before delivering messages. Messages that reach this skill have already passed that check.
3. Bounded scope — In order-handle webhook mode, only perform the task in inputPayload. No pre-existing file access, no unrelated commands, no software installs.
4. Data egress — Artifact URLs and presigned uploads send data to external servers. In interactive sessions, confirm with the user before submitting.