Openclaw Skill Money Idea Generator

赚钱灵感生成器 | Money Idea Generator. 自动发现 AI 变现机会，生成可落地的赚钱灵感。支持多平台监控：GitHub、抖音、B站、小红书、Twitter。触发词：赚钱灵感、赚钱机会、AI 变现、商业灵感.

This skill appears to implement the advertised idea‑generation features, but before installing: 1) Inspect or run the code in a sandbox — there is no automated installer and dependencies (Python 'requests', plus optionally the 'bird' CLI for Twitter) must be present. 2) Check whether you have a local 'bird' CLI configured — the skill calls it via subprocess and that CLI may use stored Twitter credentials; if you don't want that, remove or disable the 'bird' call. 3) If you provide a GitHub token, use a token with minimal scope (read‑only) and understand it's optional; the skill will work without it but with stricter rate limits. 4) Review network endpoints used (api.gitterapp.com, api.bilibili.com, GitHub API and various search URLs) and confirm you are comfortable with the skill making outbound requests. 5) Note the skill will create files under ~/.openclaw/... — review those files and their permissions or change the data_dir in AssetPool if you prefer a different location. If you need low risk, run it locally in an isolated environment or container and avoid supplying additional credentials.

Type: OpenClaw Skill Name: openclaw-skill-money-idea-generator Version: 0.1.2 The skill is classified as suspicious primarily due to the execution of an undeclared external binary, `bird`, via `subprocess.run` in `scripts/multi_source_monitor.py`. While the arguments to `bird` are hardcoded, the execution of an arbitrary, undeclared command is a significant vulnerability that could lead to unexpected behavior or RCE if the `bird` command is compromised or manipulated. Additionally, `scripts/github_monitor.py` relies on an 'unofficial API' (`api.gitterapp.com`), introducing a supply chain risk. These risky capabilities, without clear malicious intent, warrant a 'suspicious' classification.