safe-payout

safe-payout is a skill for Claude Code, Codex from BreadchainCoop/labor.fun. It costs 43 tokens per session (539 once invoked), scanned A, original, MIT.

A workflow for proposing cryptocurrency reimbursements from an organisation's Safe multisig wallet, a wallet that requires several signers to approve a transaction.

In plain words
What is it for?
Use it to draft an on-chain token reimbursement for an eligible recipient, leaving final approval to the wallet's signers.
Why use it?
It separates token payments from ordinary fiat expenses and makes clear that the agent can propose a payment but cannot approve or execute it.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/breadchaincoop/labor.fun/safe-payout
Any agent
npx skills add BreadchainCoop/labor.fun --skill safe-payout
Clone the repo
git clone --depth 1 https://github.com/BreadchainCoop/labor.fun

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for safe-payout

README.md
[![agentmods](https://agentmods.dev/badge/skills/breadchaincoop/labor.fun/safe-payout.svg)](https://agentmods.dev/skills/breadchaincoop/labor.fun/safe-payout)
Your own site
<a href="https://agentmods.dev/skills/breadchaincoop/labor.fun/safe-payout"><img src="https://agentmods.dev/badge/skills/breadchaincoop/labor.fun/safe-payout.svg" alt="Measured on agentmods" height="20"></a>
Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 539 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00043 $0.00539
Opus 5 $0.00022 $0.00269
Sonnet 5 $0.00009 $0.00108
Haiku 4.5 $0.00004 $0.00054

Measured 4d ago against content hash fca6d3aefdb0, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

safe-payout scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

container/skills/safe-payout/SKILL.md · 50 lines

What it actually says

Safe Payout (on-chain reimbursement)

You can propose a token reimbursement from the cooperative's Safe{Wallet} multisig with the request_safe_payout tool. Read this before using it.

You are a proposer, never an approver

  • The tool only drafts a proposal. The payout happens only when the Safe's signers reach their threshold in their own wallets. You cannot confirm or execute — and you must never imply otherwise.
  • Never say a payout is "done", "sent", or "paid" until the chain confirms it. Until then it is proposed / N-of-threshold confirmed. The safe-payouts flow posts those mirror updates automatically — you don't poll.
  • There are no approval tiers and no amount limits you enforce. Whether it pays is the signers' on-chain decision, not yours. Don't gate or editorialize.

Fiat vs crypto

  • Crypto/token reimbursement (BREAD, on-chain) → request_safe_payout.
  • Fiat expense (USD, receipts, venmo/zelle/etc.) → request_expense (the expense-helper skill). Don't cross them.

Recipient address

  • Prefer recipient_slug (a KB people slug) — the wallet address is read from that member's profile (address: frontmatter).
  • If their profile has no address, or you only have a raw address you can't verify, ask the member for a checksummed wallet address. Never guess or reuse an address from elsewhere — a wrong address means lost funds.
  • Only pass recipient_address directly when the member has just given you a checksummed 0x… address in the conversation.

Amount

  • Pass the human token amount as a string in amount (e.g. "100", "0.5") — not base units/wei. The orchestrator converts using the token's decimals from config.

After you file it

Tell the member it's been proposed and that it pays out once signers confirm in their wallets. The flow will post the Safe{Wallet} link and the running confirmation count to the channel. See rules/finance/safe-payouts.md.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 50 lines · 43 tokens per session scan A fca6d3aefdb0

Subscribe to this mod's changes

safe-payout is a skill published in the GitHub repository BreadchainCoop/labor.fun (2 stars, last pushed 3d ago), licensed MIT. It adds 43 tokens to every session and 539 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.