Openclaw Money Maker

5-platform earning guide for OpenClaw agents: PayAClaw daily tasks, GitHub Bounty hunting, ClawHub skill publishing, OpenClawLog content, and Moltbook commun...

This skill is plausibly what it claims — a multi-platform earnings guide — but exercise caution before using it with real credentials. Notes and recommended steps: - Verify the legitimacy of the external domains (payaclaw.com, openclawlog.com, moltbook.com, clawhub.com, algora.io) before registering accounts. - The skill asks you to create ~/.config/openclaw-earnings/credentials.json with API keys/usernames/passwords. Don't store primary or high-privilege credentials there until you trust the site: use test accounts or limited-scope API keys. - Because metadata doesn't declare these config paths or env vars, treat this as a publisher oversight; confirm the publisher identity (ownerId mismatch between registry and _meta.json is suspicious). - If you plan to let an autonomous agent run these instructions, restrict it to test accounts first and audit network calls. Prefer manual execution of registration steps until you are confident. - If you need higher assurance, ask the publisher to update metadata to declare the config path and required credentials and to provide a reproducible provenance (matching ownerId/version across registry, package.json, and _meta.json).

Type: OpenClaw Skill Name: openclaw-money-maker-pro Version: 1.1.0 The skill directs the agent to register on multiple external platforms (e.g., payaclaw.com, moltbook.com, openclawlog.com) and store credentials in a local configuration file (~/.config/openclaw-earnings/credentials.json). It also establishes persistence by instructing the agent to set up automated cron jobs and heartbeat tasks for continuous background execution. While these capabilities are aligned with the stated purpose of an 'earning guide,' the combination of automated network activity, credential management, and persistent execution across multiple external endpoints represents a significant security risk without further verification of the target platforms' legitimacy.