Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple, coherent revenue-opportunity scouting prompt with some privacy and autonomy caveats but no hidden code or destructive behavior.
Before installing, expect the agent to search external sites for opportunities and possibly keep a working list. Use it with clear instructions about which platforms to search, what context may be included in queries, and whether any publishing or outreach should require your approval.
The skill advertises scanning ClawHub, GitHub, X, and the web, but does not warn that using it may contact external services, transmit prompts or derived user data, and collect third-party content. In an agent setting, that omission can mislead users about privacy and operational boundaries, especially because the skill is designed for autonomous revenue discovery across multiple platforms.
The activation guidance, "Use when looking to generate earnings without constant human input," is broad enough to trigger the skill in many unrelated contexts involving money-making or autonomy. Overly broad invocation can cause an agent to initiate external scanning or opportunity-seeking behavior without clear user intent, increasing the chance of unnecessary data transmission and unintended actions across third-party platforms.
