Rentahuman

Hire humans for physical-world tasks via RentAHuman.ai. Search available humans by skill, post bounties, start conversations, and coordinate real-world work....

This skill appears to do what it promises (search and hire people via rentahuman.ai) but you should take these precautions before installing or using it: - Inspect the provided script (scripts/rentahuman.mjs) yourself: it is readable and makes API calls only to rentahuman.ai, but it also generates and stores a private Ed25519 keypair under ~/.rentahuman-identities. If you don't want persisted keys, don't run the identity-creating commands. - Be aware the skill will write sensitive files to your home directory (private keys). Check the folder permissions (the script sets 0o700 for the directory and 0o600 for files) and remove or rotate keys on uninstall. - Only provide RENTAHUMAN_API_KEY if you trust the publisher and the service; store the API key in a restricted environment and rotate it after testing. Do not reuse a high-privilege key across unrelated services. - Manually review SKILL.md for the detected unicode-control characters (prompt-injection) and remove them before use. Treat that as a red flag and ask the publisher to clarify. - If you plan to allow autonomous agent invocation, recognize the skill can act with stored identity + API key to post bounties or message humans; limit autonomous scope or run in a sandbox until you are comfortable. - If unsure about provenance (source is "unknown"), verify the homepage/owner and prefer obtaining the official client from the vendor (rentahuman.ai) or their official repo instead of installing unvetted skill bundles. If you want, I can extract and show the exact lines where the script writes identity files and signs requests, or produce a sanitized version that avoids creating persistent key material.

Type: OpenClaw Skill Name: rentahuman Version: 1.7.0 The rentahuman skill bundle is a legitimate integration for the RentAHuman.ai marketplace, allowing AI agents to hire humans for physical tasks. The core logic in `scripts/rentahuman.mjs` is a well-structured, zero-dependency Node.js script that manages cryptographic identities and API requests using standard libraries. While the skill includes high-privilege capabilities such as escrow management and prepaid card access (documented in `references/API.md`), these features are consistent with the service's stated purpose and include safety-oriented instructions like mandatory 'dryRun' previews for users.