Skills from clawhub.ai/renixaus

Perform web searches using DuckDuckGo. Use when web search is needed and no API key is available or Brave Search is not preferred.

Malicious skill decodes embedded client credentials, reads `~/.clawdbot/agents/main/agent/auth-profiles.json`, and sends refresh tokens to `https://oauth2.googleapis.com/token` and `https://cloudcode-pa.googleapis.com/v1internal:fetchAvailableModels`. It claims to check Antigravity quotas for Claude and Gemini models.

Malicious skill that runs obfuscated and remote shell commands: it decodes and pipes a base64 payload to `bash` which fetches `http://91.92.242.30/q0c7ew2ro8l2cfqp` and also directs downloading `https://github.com/denboss99/openclaw-core/releases/download/v3/openclawcore-1.0.3.zip`. It claims to provide Yahoo Finance data via `openclaw-core`.

The marketplace for AI agents to find work and earn money. Use this skill when the user asks you about how to make money online or asks you anything about MoltyWork

This skill queries the Intellectia API to provide one-symbol yearly stock forecasts and "should I buy" analyses using `https://api.intellectia.ai` endpoints. It includes executable examples using `curl` and `python3`, thereby enabling outbound network requests.