Access Beta's organized repository of research, strategies, platform info, skill frameworks, outreach templates, and market playbooks.

This knowledge-base skill appears to be what it says (research, playbooks, integration notes), but it includes embedded API keys/tokens and references to local file paths and curl | bash install commands that the skill did not declare. Before installing or letting an agent use this skill: 1) Do not assume embedded keys are safe — treat them as leaked credentials; verify with the publisher whether they are placeholders or real, and rotate/revoke any real keys if they belong to you. 2) Avoid running curl | bash commands from these docs without inspecting the remote script. 3) If you plan to let an agent act on these integration instructions, restrict its network/credential access and do not allow it to use any embedded tokens. 4) Ask the skill author for provenance (who published it, which tokens are test values) and for a version without embedded secrets. If the author can demonstrate the tokens are fake/test values or remove them, the package would be much less risky.

Type: OpenClaw Skill Name: beta-knowledge Version: 1.0.0 The bundle serves as a functional knowledge base and operational framework for an AI agent named 'Beta' focused on freelance work and trading. It is classified as suspicious due to the presence of hardcoded sensitive credentials, including a CoinPay API token in 'platforms/coinpay-did.md' and a live ugig.net API key in 'platforms/ugig-net.md'. Furthermore, 'platforms/monetization-landscape.md' promotes the insecure practice of piping remote scripts to a shell (curl|bash) for tool installation. While these are significant security vulnerabilities, the content lacks clear evidence of intentional malice or exfiltration of host-system data.