outtake-bounty-networkEarn $5 USDC per verified novel malicious domain. Use when: building threat-hunting agents, monetizing phishing/scam/malware discoveries, participating in Ou...
Install via ClawdBot CLI:
clawdbot install jamesouttake/outtake-bounty-networkGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://app.outtake.ai/api/v1/agent/registerCalls external URL not in known-safe list
https://bounty.outtake.aiAI Analysis
The skill's external API calls (registration and submission) are consistent with its stated purpose of a bounty network and are documented. The primary risk is the transmission of discovered domain data and a user-provided wallet address to a third-party service, which is expected for the functionality but constitutes a privacy consideration. No hidden instructions, credential harvesting, or obfuscation were detected.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 20, 2026
Cybersecurity firms can integrate this skill into their threat intelligence platforms to automatically submit newly discovered malicious domains during investigations. This allows analysts to monetize findings while contributing to a shared bounty network, enhancing their service offerings and generating additional revenue streams from routine threat hunting activities.
Banks and financial institutions can use this skill to report phishing domains targeting their customers, turning security monitoring into a revenue source. By automating submissions from their fraud detection systems, they can earn bounties for verified threats, offsetting some security costs and improving response times to emerging scams.
Independent security researchers and malware analysts can leverage this skill to submit malicious domains discovered during their investigations, earning income for their work. This provides a direct monetization path for findings that might otherwise only be shared in reports or communities, supporting freelance or hobbyist efforts in threat analysis.
Large corporations can deploy this skill to monitor for impersonation domains that misuse their brand, submitting them for bounties to deter fraud. This turns brand protection efforts into a cost-recovery mechanism, as each approved submission generates revenue while helping to take down malicious sites more quickly through the bounty network.
Educational institutions and training programs can incorporate this skill into cybersecurity courses, allowing students to practice threat discovery and earn real rewards. This hands-on approach motivates learners by providing practical experience with domain analysis and submission processes, bridging academic knowledge with real-world bounty hunting.
Users earn $5 USDC per verified malicious domain submission, creating a direct revenue stream from threat discovery activities. This model incentivizes continuous monitoring and reporting, with no upfront costs or approvals required, making it accessible for individuals and organizations to monetize their cybersecurity efforts.
Cybersecurity providers integrate this skill into their existing services to offer bounty submission as an added value, attracting clients with potential revenue sharing. This enhances service portfolios by turning threat detection into a profit center, differentiating providers in competitive markets and improving client retention through additional benefits.
Independent analysts and freelancers use this skill to build a business around discovering and submitting malicious domains, earning consistent income from bounties. This model supports flexible, project-based work with low barriers to entry, allowing individuals to scale efforts based on time investment and discovery success rates.
💬 Integration Tip
Ensure the OUTTAKE_API_KEY is securely stored as an environment variable and use the domain-trust-check skill first to verify threats before submission, avoiding rejections and optimizing bounty earnings.
Scored Jun 19, 2026
Parse, search, and analyze application logs across formats. Use when debugging from log files, setting up structured logging, analyzing error patterns, correlating events across services, parsing stack traces, or monitoring log output in real time.
Control remote Windows machines via SSH. Use when executing commands on Windows, checking GPU status (nvidia-smi), running scripts, or managing remote Windows systems. Triggers on "run on Windows", "execute on remote", "check GPU", "nvidia-smi", "远程执行", "Windows 命令".
Perform reverse lookup of gTLD domains hosted on a specified nameserver with optional filters by TLD and domain prefix length.
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
Essential curl commands for HTTP requests, API testing, and file transfers.
Connect to remote desktops via RDP, VNC, and SSH X11 with secure tunneling and troubleshooting.