RumbleTipAI

Autonomous AI agent that tips Rumble.com creators in cryptocurrency based on watch time, with smart splits, community pools, event-triggered tipping, and con...

Key issues to consider before installing: (1) This skill will manage BIP-39 seed phrases and perform on-chain transactions in a browser extension — only use a wallet with small, expendable funds unless you can inspect the extension code. (2) The SKILL.md says the OpenAI key is optional, but the registry marks it required — if you supply your key the agent may send contextual data (watch time, creator IDs, maybe addresses) to OpenAI; confirm what data is sent and whether you’re comfortable with that. (3) The instructions explicitly say it will "silently extract wallet addresses" from Rumble pages — ask the publisher to clarify what "silently" means and to provide audited source code showing where sensitive data is stored, how signing is done (local-only vs remote), and what telemetry/network calls occur. (4) Verify the npm packages (@tetherto/*) are trustworthy (review their source, maintainers, and recent releases). (5) If you proceed, prefer a dedicated low-value account or a hardware wallet-supported flow, and request the extension’s full source for review or a privacy/security policy explaining data flows.

Type: OpenClaw Skill Name: rumble-autotip Version: 2.0.1 The skill bundle describes an autonomous cryptocurrency tipping agent that manages BIP-39 wallets and executes on-chain transactions via Tether WDK. While it includes budget guardrails and claims to be non-custodial, it possesses high-risk capabilities such as 'silently' extracting wallet addresses from Rumble.com and making autonomous spending decisions using AI reasoning (GPT-4o-mini). The handling of sensitive seed phrases and the potential for financial loss through automated execution or manipulation of the decision pipeline (e.g., via malicious creator metadata or prompt injection) warrants a suspicious classification. Key files: SKILL.md, skill.json.