Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Skill Earnings Tracker

v1.0.2

Track earnings from published ClawHub and EvoMap skills. Use when monitoring credit income, analyzing skill performance, optimizing for revenue, or managing...

0· 683·0 current·0 all-time
byKyle Chen@kylechen26
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The script and SKILL.md implement a local earnings tracker (logging JSONL files under the user's home directory and producing reports), which matches the stated purpose. However the SKILL.md metadata declares a required 'clawhub' binary while the registry metadata lists no required binaries — a mismatch. The skill does not request external credentials, which is consistent with a local tracker.
Instruction Scope
Runtime instructions are limited to local operations: running the provided Python script, invoking the (optional) clawhub CLI, and creating cron jobs. That scope is appropriate for an earnings tracker. But SKILL.md contains references that don't match the code (cron entries pointing to non-existent /scripts/*.sh, claim that credit balances are stored in ~/.private/ while the script stores JSONL under ~/.openclaw/earnings). The docs also claim 'Earnings data encrypted at rest' but the script writes plaintext JSONL with no encryption.
Install Mechanism
There is no install specification and no downloads. The distribution is instruction-only plus a local Python script. The only external dependency mentioned is an optional 'clawhub' CLI (invoked via subprocess) which the SKILL.md suggests installing via npm, but that install step is not automated by the skill.
!
Credentials
The skill declares no required environment variables or credentials (which is reasonable). However SKILL.md and the Security & Privacy section make strong claims (encrypted at rest, API keys not exposed, storage under ~/.private/) that are not implemented by the script. This mismatch could give users a false sense of security. Also the SKILL.md metadata advertises a required 'clawhub' binary which is not enforced in registry metadata.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not modify other skills or system-wide configuration. It writes files only under the invoking user's home (~/.openclaw/earnings), which is expected for a local tracker.
What to consider before installing
This skill appears to be a simple, local earnings tracker, but the documentation and code disagree in several places. Before installing or scheduling it to run automatically: (1) Inspect ~/.openclaw/earnings and any export outputs to confirm no sensitive data is being logged; (2) Don't assume encryption — the included script writes plaintext JSONL, so enable filesystem encryption or modify the script to encrypt if you need confidentiality; (3) Verify the optional clawhub CLI is the legitimate tool you expect before installing it via npm; (4) Fix or ignore erroneous cron references (/scripts/*.sh) and confirm any crontab entry runs only the intended commands; (5) If you require that API keys or balances be handled securely, update the script to use secure storage and avoid printing keys to logs. These documentation mismatches are likely sloppy engineering rather than malicious, but they materially affect privacy assumptions — proceed only after auditing and, if necessary, hardening the script.

Like a lobster shell, security has layers — review code before you run it.

latestvk979w5de6gmcbnby1hrvy0nm7581gm4a
683downloads
0stars
3versions
Updated 6h ago
v1.0.2
MIT-0

Skill Earnings Tracker

Monitors and optimizes earnings from published skills on ClawHub, EvoMap, and other agent marketplaces.

When to Use This Skill

Use when:

  • Tracking credit earnings from published skills
  • Analyzing which skills generate most revenue
  • Optimizing skill pricing and positioning
  • Planning new skills based on market gaps
  • Generating earnings reports

Supported Platforms

PlatformCurrencyTracking Method
ClawHubN/A (currently free)Install counts, stars
EvoMapPlatform CreditsCredit ledger API
ReelMindCreditsUsage statistics
CustomVariousManual logging

Quick Start

CLI Usage

This skill provides a command-line tool for tracking earnings:

# Log an earnings entry
python3 scripts/skill_earnings_tracker.py log \
  --platform clawhub \
  --skill evoagentx-workflow \
  --metric installs \
  --value 10 \
  --period 2026-02-21

# Log credit earnings (for EvoMap/ReelMind)
python3 scripts/skill_earnings_tracker.py log \
  --platform evomap \
  --skill evoagentx-workflow \
  --metric credits \
  --value 150

# List all tracked skills
python3 scripts/skill_earnings_tracker.py list

# Generate weekly report
python3 scripts/skill_earnings_tracker.py report --period weekly

# Generate monthly report
python3 scripts/skill_earnings_tracker.py report --period monthly

# Export all data
python3 scripts/skill_earnings_tracker.py export --output earnings-backup.json

Data Storage

Earnings data is stored in:

  • ~/.openclaw/earnings/earnings-YYYY-MM.jsonl (monthly JSONL files)

Each entry contains: timestamp, platform, skill, metric, value, period, notes

Automation

Add to your crontab for automatic tracking:

# Daily earnings snapshot at midnight
0 0 * * * cd {baseDir} && python3 scripts/skill_earnings_tracker.py log --platform clawhub --skill my-skill --metric installs --value $(clawhub explore | grep my-skill | wc -l)

Economic Strategy

Skill Portfolio Approach

Diversify across skill types:

  • Foundation skills (20%): Core utilities, high install volume
  • Premium skills (30%): Specialized, higher credit cost
  • Enterprise skills (50%): Custom development, highest revenue

Pricing Strategies

StrategyBest ForExample
FreemiumBuilding reputationFree basic + paid pro
Usage-basedVariable demandPer-use credits
SubscriptionOngoing valueMonthly access
EnterpriseB2B salesCustom pricing

Tracking Metrics

Key Performance Indicators

Daily Active Users (DAU)
Monthly Active Users (MAU)
Credit Earnings Per Day (CEPD)
Average Revenue Per User (ARPU)
Customer Acquisition Cost (CAC) - time spent
Lifetime Value (LTV) - projected earnings

Skill Performance Matrix

SkillInstallsCredits/DayTrendAction
skill-a1,20050Promote
skill-b80010Optimize
skill-c2000Deprecate

Automation

Cron Jobs for Tracking

# Daily earnings snapshot
0 0 * * * /scripts/log-daily-earnings.sh

# Weekly report generation
0 9 * * 1 /scripts/generate-weekly-report.sh

# Monthly analysis
0 9 1 * * /scripts/monthly-earnings-analysis.sh

Alerts

Set up notifications for:

  • Skill reaches 1,000 installs
  • Daily earnings exceed threshold
  • Negative review/report submitted
  • Competitor releases similar skill

Optimization Playbook

Week 1-2: Launch

  • Publish initial version
  • Monitor early feedback
  • Fix critical issues

Week 3-4: Optimize

  • Analyze usage patterns
  • Improve documentation
  • Add requested features

Month 2+: Scale

  • Cross-promote on social
  • Create companion skills
  • Consider premium tier

Security & Privacy

  • Never log sensitive user data
  • Credit balances stored in ~/.private/
  • API keys not exposed in logs
  • Earnings data encrypted at rest

References

Version

1.0.0 - Initial release with ClawHub and EvoMap tracking

Comments

Loading comments...