Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (autonomous money-making assistant) aligns with the SKILL.md: phases cover discovery, evaluation, competitor analysis, reporting, and state persistence. All declared capabilities are coherent with that purpose.
Instruction Scope
The instructions ask the agent to read/write a local file (income_database.json), use memory_store/recall, load historical reports, and perform multi-platform research (Zhihu, Xiaohongshu, Upwork, ClawHub). This is consistent with the purpose but broad: it implies web scraping/browsing across external sites and persistent local storage. The skill does not provide details about how web access is performed (authenticated vs. public), nor does it specify rate-limiting or TOS compliance—these are operational concerns the user should be aware of.
Install Mechanism
There is no install spec and no code files; it's a prompt-only skill. This minimizes disk writes and third-party package risk.
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, many of the targeted platforms (Upwork, some content platforms) may require logins for full access; the skill doesn't request them explicitly, so it may either operate only on public data or prompt for credentials at runtime. Be cautious about supplying platform credentials.
Persistence & Privilege
always is false and autonomous invocation is allowed (default). The skill instructs the agent to persist state to income_database.json and memory_store, which is appropriate for its tracking purpose and does not imply elevated system privileges or modification of other skills' configs.
Assessment
This is an instruction-only assistant that will read/write a local state file (income_database.json) and perform multi-platform research (public pages or via whatever browsing/scraping tool your agent has). It does not request environment variables or install code, which reduces direct risk. Before using: (1) confirm where income_database.json will be stored and whether that location is acceptable for storing financial data; (2) do not paste platform credentials into the skill unless you trust the owner—if the agent asks for logins, prefer using platform APIs with scoped tokens or perform research manually; (3) be aware it may collect public data from third-party sites—check those sites' terms of service if you plan automated scraping; (4) because the skill lacks a homepage or known owner, consider running it in a limited/isolated environment until you’re comfortable with its behavior.Like a lobster shell, security has layers — review code before you run it.
autonomousvk9746x2bfj718qs7c29ee1kj6h8251d9latestvk9746x2bfj718qs7c29ee1kj6h8251d9moneyvk9746x2bfj718qs7c29ee1kj6h8251d9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.