agents-pay
Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments, and applying operator-defined spend limits. Covers payment setup, policy, session budgets, and troubleshooting. Triggers on: "my agent hit a 402 while calling an API", "a tool call returned 402 Payment Required", "my agent needs to pay for x402-protected content", "let the agent pay for content, capped at $5 per session", "set a spend limit for the agent", "ProcessPayment failed", or "why did my agent refuse to pay". Not for BUILDING payment capability for end users, including wallets and framework middleware; use agents-build and references/payments.md. For non-paid APIs via Gateway use agents-connect. For inbound auth use agents-harden. For project scaffolding use agents-get-started.
Agent Skill from aws/agent-toolkit-for-aws
Copilot Studio
Passes documented load rulesNo documented load rule failed.
Microsoft 365 Copilot Preview, Frontier tenants only
Needs changes- Fails: Instructions are under 20,000 characters (M365-INSTRUCTIONS)
instructions are 25,125 characters
rule · Microsoft 365 Copilot: What is a skill - Fails: Directory depth is at most 3 (M365-DEPTH)
deepest file is 4 folders down
rule · Microsoft 365 Copilot: Support matrix - Fails: Every file has a supported file type (M365-FILE-TYPES)
2 unsupported: .gitignore, packages/openclaw/.gitignore
rule · Microsoft 365 Copilot: Supported file and script types
Warnings (don't change the verdict):
- Warning: No sign of network access, package installs or authenticated calls (M365-SANDBOX)
SKILL.md mentions Python HTTP client, pip/uv install, npm/npx install
rule · Microsoft 365 Copilot: Script execution sandbox - Warning: No sign of network access, package installs or authenticated calls (M365-SANDBOX)
declares dependencies (packages/openclaw/package.json, requirements.txt); the sandbox can't install packages
rule · Microsoft 365 Copilot: Script execution sandbox - Warning: No sign of network access, package installs or authenticated calls (M365-SANDBOX)
scripts: packages/openclaw/src/x402.ts (JS HTTP client, credentials / authenticated call); packages/openclaw/test/security.test.mjs (credentials / authenticated call); scripts/agents_pay_admin.py (pip/uv install); scripts/test_portability.py (Python HTTP client, pip/uv install, npm/npx install); scripts/test_x402_policy.py (Python HTTP client); …
rule · Microsoft 365 Copilot: Script execution sandbox
An agent can have at most 8 skills. Custom skills aren't available in tenants that use Microsoft Purview Information Barriers.
- Warning: No experimental allowed-tools field (SPEC-ALLOWED-TOOLS)
uses allowed-tools
rule · Agent Skills specification
Standards signals
Meets the agentskills.io required fields.
| Frontmatter | Present and parsed Spec: frontmatter |
| name | Meets the spec (1-64 chars, a-z 0-9 hyphens) Spec: name |
| description | Present, 1-1,024 characters Spec: description |
| compatibility | Absent or under 500 characters Spec: compatibility |
| Name matches folder | Yes (agents-pay)Spec: name |
| allowed-tools | Used Note: experimental in the spec; support varies by agent. Spec: allowed-tools |
Observed from the public SKILL.md at the commit above on 2026-10-23. Not a certification: AAIF and the Agent Skills project don't certify skills. Validate your own skill with skills-ref validate.
| Source repo | aws/agent-toolkit-for-aws |
| Path | plugins/aws-agents/skills/agents-pay/SKILL.md |
| Commit checked | 9ab50636d125 |
| Repo license | Apache-2.0 |
| Files | 34 |
| Scripts | 17 (17 scanned for the sandbox heuristic) |
| Instructions | 25,125 characters |
| Deepest folder | 4 below the skill folder |
| Rules version | 2026-10-22 |
Re-check the latest version How skill checks work
Rule-based checks of public files against Microsoft's documented load rules, not tested in Copilot Studio or Microsoft 365 Copilot. Independent project, not affiliated with Microsoft.