Back to skill
Skillv1.1.0
ClawScan security
Openclaw Money Course · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 14, 2026, 12:49 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only monetization coach for OpenClaw and its declared requirements, instructions, and lack of installs/credentials are consistent with that purpose.
- Guidance
- This is an instruction-only coaching skill and appears internally consistent: it provides monetization plans, pricing, channels, and templates without asking for credentials or installing software. Before using it, avoid pasting any sensitive credentials or private data into prompts; verify recommended external resources/links yourself; treat pricing/earnings projections as guidance (not guarantees), and consider testing small, reversible actions first (e.g., publishing one article or running a one-off promotion) rather than committing to large financial decisions based solely on automated advice.
Review Dimensions
- Purpose & Capability
- okName/description (help users monetize with OpenClaw to earn a first ¥99) match the SKILL.md content which provides planning, pricing, channels, funnels, and tracking advice. There are no unrelated env vars, binaries, or installs required.
- Instruction Scope
- okSKILL.md instructs the agent to analyse the user's skills and produce action plans, resources, templates, and tracking suggestions. It does not direct the agent to read local files, access environment variables, or call external endpoints beyond providing links/templates, so scope remains within the stated coaching purpose.
- Install Mechanism
- okNo install spec and no code files are present (instruction-only). This is the lowest-risk installation model and is appropriate for a guidance/tutorial skill.
- Credentials
- okThe skill declares no required environment variables, secrets, or config paths. The functionality described (advice, plans, templates) does not require additional credentials, so requested access is proportionate.
- Persistence & Privilege
- okalways is false and the skill is user-invocable. It does not request persistent presence or modify other skills/config. Autonomous model invocation is allowed by platform default but not unusual here.