Profit Hunter

合法赚钱项目挖掘与执行助手。持续搜索、研究、评估和执行合法在线收入机会。 当用户说"赚钱"、"副业"、"收入"、"怎么赚钱"、"兼职"、"副业收入"、"合法赚钱"时激活。 聚焦：技能变现、内容创作、平台任务、电商、 freelancing 等合法领域。不含任何欺诈、传销或违法内容。

Security Scan

The skill claims to research and execute legal income ideas, but bundled scripts perform undisclosed billing calls (with a hard-coded API key) and write to the user's home — behavior not documented in SKILL.md and disproportionate to the stated purpose.

Purpose & Capability

The README/description focuses on finding and tracking income opportunities and does not mention any monetization or billing. However, the shipped scripts contact an external billing service (https://skillpay.me) and attempt to charge users. A user-help/idea-discovery skill does not legitimately require built-in charging logic or a third-party API key baked into the code.

Instruction Scope

SKILL.md describes web searches, evaluation, execution, and manual tracking but never instructs running the included Python scripts nor mentions charging. In contrast, scripts/track_income.py imports and runs billing_check at startup and will abort if billing_check fails — causing unexpected network calls and potential charges. This is scope creep and a surprising side-effect not documented in the skill instructions.

Install Mechanism

There is no install spec (instruction-only), which normally reduces risk, but the bundle includes executable Python scripts that perform network operations. The scripts contain a hard-coded API key and make outbound HTTPS calls to a third-party domain; even without an install step, executing these scripts has risk. The presence of an embedded secret and external endpoints is disproportionate for a research/tracking skill.

Credentials

The skill declares no required env vars, but track_income.py reads SKILLPAY_USER_ID from the environment and both scripts rely on a hard-coded BILLING_API_KEY. The code also writes to a user file at ~/.openclaw/profit_tracker.json (undeclared). Asking for or embedding billing credentials and performing charges is not justified by the skill description and is a red flag.

Persistence & Privilege

The skill does not request always:true and does not alter other skills, which is good. However, it persists data to ~/.openclaw/profit_tracker.json and includes code that will run automatically on script execution and may exit the process on billing failure. Autonomous invocation combined with built-in charging increases potential impact — the skill can make network calls and modify files in the user's home directory.

What to consider before installing

Do not run the included scripts without clarifying the billing behavior. The package contains hard-coded billing credentials and will attempt to contact skillpay.me and charge the user (track_income.py calls billing_check on startup). Ask the maintainer to: (1) explain why built-in charging is needed and document it in SKILL.md, (2) remove the hard-coded API key (never include secret keys in code), (3) require explicit, interactive user consent before any network charge, and (4) make file paths configurable (or ask permission) instead of writing to ~/.openclaw. If you already executed these scripts, consider revoking/rotating the exposed API key and audit outbound network traffic. If you want to test the skill, do so in a network-restricted sandbox and inspect what outbound calls occur first.

合法在线收入挖掘与执行助手。持续研究 → 评估方案 → 执行落地 → 追踪结果。

核心原则

• 100% 合法 — 只推荐和执行合法合规的赚钱方式
• 先调研后行动 — 每个方案先评估可行性再执行
• 小步快跑 — 先小规模测试，成功后复制放大
• 持续迭代 — 根据数据反馈优化策略

工作流程

第 1 步：发现机会

通过以下渠道持续挖掘合法赚钱机会：

// 搜索最新赚钱项目
batch_web_search({
  queries: [
    { query: "2026 合法在线赚钱方式", num_results: 10 },
    { query: "零成本副业 2026", num_results: 8 },
    { query: "技能变现 平台 2026", num_results: 8 }
  ]
})

第 2 步：评估筛选

每个项目必须通过以下检查：

检查项	标准	淘汰条件
合法性	官方平台、无需缴纳入门费	需缴费=立即排除
可行性	有真实用户基础	零用户平台不碰
技能匹配	与用户现有技能匹配	完全不匹配跳过
收益预期	¥50+/天 起步	低于 ¥20/天 优先做任务平台
时间成本	每日 1-3 小时	高于 4 小时需评估

第 3 步：执行落地

根据用户现状匹配方案：

用户现状评估：
├── 有无技能（编程/设计/写作/翻译/外语）
├── 有无本金（0 / 500+ / 5000+）
├── 有无时间（1小时 / 3小时 / 6小时+）
└── 有无设备（手机 / 电脑 / 都有）

匹配优先级：

现状	首选方案	预估日收益
无技能+无本金+手机	任务平台（阿里众包/美团众包）	¥50-150
无技能+无本金+电脑	问卷/内容搬运	¥30-100
有技能+无本金	Freelancing（Upwork/猪八戒）	¥100-500
有技能+有本金	技能产品化（课程/模板）	¥200-1000
有本金+有时间	电商/闲鱼无货源	¥100-500

第 4 步：执行监控

// 定期检查收入情况
batch_web_search({
  queries: [
    { query: "{平台名称} 最新任务", data_range: "d" },
    { query: "{赚钱方式} 技巧 2026", num_results: 5 }
  ]
})

收入来源分类

A. 零成本起步（无需本金）

方式	平台	日收益	上手难度
任务平台	阿里众包/腾讯搜活帮	¥50-150	★
问卷调查	人人赢/收奖网	¥20-80	★
App 拉新	各大平台推广	¥50-200	★★
内容创作	小红书/抖音/B站	¥0-500	★★★
自由职业	猪八戒/程序员客栈	¥100-1000	★★★

B. 小额本金起步（500+）

方式	平台	日收益	上手难度
闲鱼无货源	闲鱼	¥100-500	★★
拼多多无货源	拼多多	¥100-300	★★
虚拟商品	知识付费/模板	¥50-500	★★★

C. 技能变现（有专长）

技能	变现平台	日收益
编程	Upwork/GitHub/程序员客栈	¥300-2000
设计	站酷/千库/特创易	¥200-1000
写作	知乎/公众号/百家号	¥100-500
翻译	译客/有道/做到	¥150-800
视频剪辑	抖音/B站/影视公司外包	¥200-800

持续创新机制

每周扫描

每周执行一次新机会扫描：

// 每月第一周：搜索当月新平台活动
// 每月第二周：评估上月执行效果
// 每月第三周：优化方案或切换赛道
// 每月第四周：总结收益，制定下月目标

收益追踪模板

📊 月度收益追踪

目标：¥{金额}
起点：¥{金额}
本周：¥{金额}
本月累计：¥{金额}
完成率：{百分比}%

执行记录：
- {日期} {方式A} 收益 ¥{金额}
- {日期} {方式B} 收益 ¥{金额}

注意事项

• 不碰：传销、资金盘、高息理财、赌博相关
• 警惕：需缴纳入门费、需发展下线、承诺高回报的项目
• 优先：有真实产品/服务支撑的正当商业
• 分散：不要只看一个平台，多平台同时执行降低风险
• 记录：每日记录收入来源和金额，数据驱动优化决策