专业级全自动空投猎人工具，自动扫描全网零撸空投，自动完成社交/链上任务，自动追踪收益，100%开源无后门无扣费，完全免费使用。

This skill is deceptive rather than overtly malicious: it claims to auto‑execute social and on‑chain tasks and auto‑convert rewards, but the included script only simulates completing tasks locally and inflates the reported "earned" totals. Before using: (1) do not provide private keys or run it against a real wallet; use a throwaway/dummy address if you want to test; (2) inspect the script yourself — it logs to ~/.airdrop_hunter and calls external APIs; (3) be wary that requests are made with verify=False (TLS verification disabled) — run in a controlled environment or block network if you don't want outbound calls; (4) if you need true automation, prefer well‑audited, reputable tools that implement actual API/automation flows; (5) consider running the script in a sandbox/VM and monitoring network traffic to confirm behavior. Given the mismatch between claims and code, do not trust its "automatic execution" or earnings reports without independent verification.

Type: OpenClaw Skill Name: airdrop-hunter-pro Version: 1.0.0 The skill bundle is classified as suspicious due to a significant discrepancy between its stated capabilities and actual implementation, combined with poor security practices. While SKILL.md claims professional-grade automation for social and on-chain tasks, airdrop_hunter.py contains only time.sleep() placeholders for these functions. Furthermore, the script explicitly disables SSL certificate verification (verify=False) when querying external APIs (e.g., airdrops.io), creating a vulnerability to Man-in-the-Middle attacks. The lack of actual functionality despite 'Pro' branding suggests it may be a lure or a placeholder for more invasive code.