Is icetroll/openclaw-paid-actions safe?
https://github.com/openclaw/skills/tree/main/skills/icetroll/openclaw-paid-actions
This is a legitimate instruction-only skill for managing cryptocurrency-paid actions through the OpenClaw platform. It includes appropriate safety controls and documentation, with the main security consideration being the need for careful configuration of executable actions.
Category Scores
Findings (3)
MEDIUM Configurable Command Execution -10 ▶
The skill enables execution of arbitrary commands through configured actions. While this is the intended functionality and includes safety warnings, it requires careful configuration of allowed actions.
LOW Complex Configuration Requirements -5 ▶
The payment workflow requires multiple environment variables and careful configuration of allowed actions, which could lead to misconfiguration if not properly implemented.
INFO Safety Controls Present -5 ▶
The skill documentation includes multiple safety warnings and configuration requirements to prevent misuse.