← Back to Skills Marketplace
shenmeng

Profit Hunter

by shenmeng · GitHub ↗ · v1.3.0 · MIT-0
cross-platform ⚠ suspicious
143
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install shenmeng-profit-hunter
Description
合法赚钱项目挖掘与执行助手。持续搜索、研究、评估和执行合法在线收入机会。 当用户说"赚钱"、"副业"、"收入"、"怎么赚钱"、"兼职"、"副业收入"、"合法赚钱"时激活。 聚焦:技能变现、内容创作、平台任务、电商、 freelancing 等合法领域。不含任何欺诈、传销或违法内容。
Usage Guidance
Do not run the included scripts without clarifying the billing behavior. The package contains hard-coded billing credentials and will attempt to contact skillpay.me and charge the user (track_income.py calls billing_check on startup). Ask the maintainer to: (1) explain why built-in charging is needed and document it in SKILL.md, (2) remove the hard-coded API key (never include secret keys in code), (3) require explicit, interactive user consent before any network charge, and (4) make file paths configurable (or ask permission) instead of writing to ~/.openclaw. If you already executed these scripts, consider revoking/rotating the exposed API key and audit outbound network traffic. If you want to test the skill, do so in a network-restricted sandbox and inspect what outbound calls occur first.
Capability Analysis
Type: OpenClaw Skill Name: shenmeng-profit-hunter Version: 1.3.0 The skill is designed to help users identify and track legitimate online income opportunities using well-known platforms (e.g., Alibaba, Tencent, Upwork). It includes a transparent monetization layer in 'scripts/skillpay.py' and 'scripts/track_income.py' that implements a pay-per-use billing system (0.001 USDT) via the skillpay.me API. While it contains a hardcoded API key (likely the developer's), there is no evidence of data exfiltration, malicious execution, or harmful instructions directed at the agent.
Capability Assessment
Purpose & Capability
The README/description focuses on finding and tracking income opportunities and does not mention any monetization or billing. However, the shipped scripts contact an external billing service (https://skillpay.me) and attempt to charge users. A user-help/idea-discovery skill does not legitimately require built-in charging logic or a third-party API key baked into the code.
Instruction Scope
SKILL.md describes web searches, evaluation, execution, and manual tracking but never instructs running the included Python scripts nor mentions charging. In contrast, scripts/track_income.py imports and runs billing_check at startup and will abort if billing_check fails — causing unexpected network calls and potential charges. This is scope creep and a surprising side-effect not documented in the skill instructions.
Install Mechanism
There is no install spec (instruction-only), which normally reduces risk, but the bundle includes executable Python scripts that perform network operations. The scripts contain a hard-coded API key and make outbound HTTPS calls to a third-party domain; even without an install step, executing these scripts has risk. The presence of an embedded secret and external endpoints is disproportionate for a research/tracking skill.
Credentials
The skill declares no required env vars, but track_income.py reads SKILLPAY_USER_ID from the environment and both scripts rely on a hard-coded BILLING_API_KEY. The code also writes to a user file at ~/.openclaw/profit_tracker.json (undeclared). Asking for or embedding billing credentials and performing charges is not justified by the skill description and is a red flag.
Persistence & Privilege
The skill does not request always:true and does not alter other skills, which is good. However, it persists data to ~/.openclaw/profit_tracker.json and includes code that will run automatically on script execution and may exit the process on billing failure. Autonomous invocation combined with built-in charging increases potential impact — the skill can make network calls and modify files in the user's home directory.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install shenmeng-profit-hunter
  3. After installation, invoke the skill by name or use /shenmeng-profit-hunter
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
Version 1.3.0 of shenmeng-profit-hunter - No file changes detected in this release. - No updates or new features introduced. - Functionality and documentation remain unchanged.
v1.2.0
Version 1.2.0 of shenmeng-profit-hunter - No file changes detected; content and workflow remain unchanged from previous version. - No new features, bug fixes, or documentation updates included in this release.
v1.1.0
- 新增 scripts/skillpay.py,扩展技能变现相关功能。 - 更新 scripts/track_income.py,优化收入追踪逻辑。 - 本次版本提升技能变现与收入管理的自动化能力。
v1.0.0
Profit Hunter 1.0.0 – 合法在线收入助手首发版 - 发布首个正式版本,聚焦合法赚钱、技能变现与副业执行流程。 - 明确四步工作流程:机会发现、方案评估、落地执行与结果追踪。 - 分类推荐多种合法副业类型(任务平台、内容创作、自由职业、电商等)。 - 严格筛选标准,杜绝任何违法、传销或需要入门费的项目。 - 提供收益追踪及周期性复盘机制,帮助用户持续优化收入策略。
Metadata
Slug shenmeng-profit-hunter
Version 1.3.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is Profit Hunter?

合法赚钱项目挖掘与执行助手。持续搜索、研究、评估和执行合法在线收入机会。 当用户说"赚钱"、"副业"、"收入"、"怎么赚钱"、"兼职"、"副业收入"、"合法赚钱"时激活。 聚焦:技能变现、内容创作、平台任务、电商、 freelancing 等合法领域。不含任何欺诈、传销或违法内容。 It is an AI Agent Skill for Claude Code / OpenClaw, with 143 downloads so far.

How do I install Profit Hunter?

Run "/install shenmeng-profit-hunter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Profit Hunter free?

Yes, Profit Hunter is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Profit Hunter support?

Profit Hunter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Profit Hunter?

It is built and maintained by shenmeng (@shenmeng); the current version is v1.3.0.

💬 Comments