OpenClawCash
Analysis
This deprecated instruction-only skill mostly redirects to a replacement, but its own metadata still declares a wallet API key that the registry does not disclose, so it should be reviewed before any credentials are provided.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Install the replacement skill from the URL above and follow its current instructions.
The deprecated skill hands installation off to another ClawHub URL. This is consistent with its stated deprecation purpose, but the replacement skill's provenance and permissions are outside this artifact set.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
required_env_vars:
- AGENTWALLETAPI_KEYThe skill frontmatter declares a wallet API key requirement even though the registry requirements list no env vars or primary credential, and the body says not to continue setup with this deprecated copy.