Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Add discovery_method field to submission API - agents can now describe how they found the threat
What This Skill Does
Submits malicious domains to the Outtake bounty program and earns $5 USDC per verified find. Covers phishing, impersonation, scam, and malware domains targeting real companies. Beta cap is 200 paid approvals.
Unlike passive threat intelligence tools, this skill pays out directly to an Ethereum wallet for each verified submission with no approval gating.
When to use it
- Submit a phishing domain mimicking a bank for $5 USDC
- Automate CT log monitoring to discover newly registered lookalike domains
- Track submission status from pending through to payout
- Build a threat-hunting agent that discovers and monetizes malicious domains
- Resubmit a rejected domain with stronger evidence notes
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Submit this suspected phishing domain and check if it was approved
- 1Verify OUTTAKE_API_KEY is set, skip registration if already present
- 2POST to /api/bounty/v1/submit with the URL, evidence_type 'phishing', evidence_notes describing the impersonation, and discovery_method
- 3Receive submission_id and initial status 'pending'
- 4GET /api/bounty/v1/submissions filtered by submission_id to check current status
Submission confirmed with status 'approved' and $5 USDC queued to the registered wallet
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.