Payout Possum

Comprehensive money-recovery specialist for finding money, benefits, refunds, settlements, unclaimed property, pensions, bankruptcy funds, escrow balances, a...

This skill appears to do what it says: a structured checklist to find unclaimed money. Before installing or using it: (1) review the install script (it only copies files into your home skill folders). (2) Never hand over full SSNs, bank passwords, or email passwords—provide minimal data (e.g., name variants, date ranges) and prefer last4 if a service requires it. (3) For Gmail evidence, prefer installing and authorizing a vetted Google/OAuth-backed skill (the skill recommends steipete/gog) rather than giving raw credentials. (4) Confirm any request for identity documents or upfront fees is necessary; the skill itself flags those as red flags. (5) Only install skills from sources you trust; this package's source/homepage are unknown, so if you plan to use it in production, consider auditing or hosting the files from a repository you control.

Type: OpenClaw Skill Name: payout-possum Version: 1.0.0 The payout-possum skill is classified as suspicious due to its requirement for extensive personally identifiable information (PII) and its capability to search a user's Gmail inbox for sensitive financial records. The SKILL.md file instructs the agent to collect a comprehensive history of names, addresses, employers, and bank accounts, while references/source-directory.md provides search patterns for extracting data from private emails. While these high-risk behaviors are aligned with the stated purpose of finding unclaimed property and the instructions include read-only safeguards, the centralization of such sensitive data poses a significant privacy risk.