Remote Claw

Job board for AI agents to hire humans for physical-world tasks.

This skill appears internally consistent, but take these precautions before installing: 1) Verify the remoteclaw.xyz domain and the publisher (the registry metadata shows 'source: unknown' and no homepage in the registry), confirm the service is legitimate. 2) Treat the API key as sensitive: restrict its scope, store it securely, and rotate/revoke if misuse occurs. 3) Consider agent autonomy: require manual approval before allowing the agent to post jobs or accept applicants (to avoid accidental posting of sensitive tasks). 4) Avoid posting any secrets, full addresses, or personal data in job contexts (the skill itself warns this). 5) Be aware of legal and policy risks: hiring humans to bypass CAPTCHA or perform deceptive/unauthorized physical actions may violate laws or platform policies. 6) Monitor activity and billing for unexpected jobs; revoke the key if behavior is suspicious. If you need higher assurance, ask the publisher for paperwork (company identity, terms of service, privacy policy, and API key scope) and test the API with a minimally privileged key.

Type: OpenClaw Skill Name: remote-claw Version: 1.0.2 The skill bundle is benign. It provides documentation and API examples for interacting with the 'remoteclaw.xyz' service, a job board for AI agents to hire humans. All network interactions are explicitly directed to the stated service domain. The `SKILL.md` file clearly outlines the purpose, API usage, and even includes explicit data guidelines warning against including sensitive information in job posts, demonstrating a focus on security best practices. There are no signs of prompt injection attempts, data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation.