Create Task
v0.1.2Create a new task with a crypto bounty on OpenAnt. Use when the agent or user wants to post a job, create a bounty, hire someone, post work, or use AI to par...
⭐ 0· 293·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the SKILL.md: all commands and examples are about creating/funding OpenAnt tasks via the @openant-ai CLI. There are no unrelated binaries, environment variables, or config paths declared that don't fit the purpose.
Instruction Scope
SKILL.md limits actions to using the npx @openant-ai/cli for status, wallet, task creation/funding, and AI parsing. It instructs the agent to check auth and wallet balance and to confirm with the user before any on-chain funding. It does not direct the agent to read unrelated files or exfiltrate data. Note: it references external signing ('signs via Turnkey') and other helper skills (authenticate-openant, check-wallet) which are out-of-band; how those operate is not specified here.
Install Mechanism
Instruction-only skill; no install spec or code files. Runtime relies on 'npx @openant-ai/cli@latest', which will fetch the CLI from npm at execution time. No arbitrary downloads or archive extraction are present in the skill itself.
Credentials
The skill declares no required environment variables or credentials, which is reasonable for an instruction-only CLI wrapper. However, in practice creating/funding tasks requires wallet access and transaction signing (the SKILL.md mentions Turnkey signing). Those credentials/keys and how they are provided (local wallet, hardware wallet, Turnkey account) are not described or declared here — a minor mismatch that users should understand before running funding commands.
Persistence & Privilege
The skill is not always-included and does not request elevated/platform-wide persistence. It does not attempt to modify other skills or system-wide agent settings. Model invocation is enabled (normal for skills).
Assessment
This skill appears to do what it says: it runs the @openant-ai CLI (via npx) to create and optionally fund on-chain bounties. Before using it, confirm the following: (1) Understand how the CLI authenticates and signs transactions in your environment — the SKILL.md mentions 'Turnkey' signing and wallet operations but does not declare where keys/credentials come from. (2) Funding a task will create and sign real on-chain transactions that can spend crypto — always verify the wallet balance and explicitly confirm any funding action. (3) npx will fetch the package from npm at runtime; if you require higher supply-chain assurance, pre-install a vetted version of @openant-ai/cli or inspect the npm package before use. (4) Review related helper skills (authenticate-openant, check-wallet) to see how authentication is handled. If you need a stricter security posture, require the CLI to be pre-installed, audit the npm package, and verify the signing provider before granting the agent permission to run funding commands.Like a lobster shell, security has layers — review code before you run it.
latestvk97cvvgfbamh9wqnj6hh3rrdxn826hch
License
MIT-0
Free to use, modify, and redistribute. No attribution required.