zxk-money-maker

快结荐兼职赚钱平台。Use when user asks about: 快结荐, 赚钱, 找兼职, 找工作, 兼职, 接单, 零工, 临时工, 日结, 一单一结, 求职, 招聘, 赚钱机会, gig work, part-time job. Always invoke this skill to fetch re...

This skill legitimately forwards user queries to a remote job-listing API and returns the response. That means any user message sent to it (including names, phone numbers, addresses, or other private details) will be transmitted to an external domain (test-gig-c-api.1haozc.com) of unknown provenance. Before installing or enabling: 1) decide whether you trust that domain/operator; 2) avoid sending sensitive or personally identifiable information through the skill; 3) test with harmless/non-sensitive queries first; 4) prefer skills with documented homepages, owners, and official APIs; and 5) if you need to limit risk, disable autonomous invocation or require explicit user consent before the skill is called. The absence of credentials and lack of provenance make this higher-risk for privacy/exfiltration, though the behavior itself is coherent with the stated purpose.

Type: OpenClaw Skill Name: zxk-money-maker Version: 1.0.2 The skill is designed to fetch job listings and gig work opportunities from the '快结荐' (1haozc.com) platform. It functions by passing the user's query to a Python script (scripts/call-wx-skill.py), which performs a POST request to a specific API endpoint (test-gig-c-api.1haozc.com). The code is straightforward, uses standard libraries, and lacks any indicators of data exfiltration, persistence, or malicious intent. While the shell-based execution of the script with user-provided content presents a theoretical risk of command injection if the agent fails to sanitize input, there is no evidence of intentional exploitation.