Skip to main content

loopuman

Routes tasks to verified human workers for tasks requiring human judgment, paid via cUSD on the Celo blockchain.

Install this skill

or
80/100

Security score

The loopuman skill was audited on Feb 16, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 50

Curl to non-GitHub URL

SourceSKILL.md
50curl -X POST https://api.loopuman.com/api/v1/register \
medium line 90

Webhook reference - potential data exfiltration

SourceSKILL.md
90- `--webhook` — URL for push notifications on completion
low line 38

Access to hidden dotfiles in home directory

SourceSKILL.md
38mkdir -p ~/.openclaw/skills/loopuman
low line 39

Access to hidden dotfiles in home directory

SourceSKILL.md
39cat > ~/.openclaw/skills/loopuman/config.json << 'EOF'
low line 42

External URL reference

SourceSKILL.md
42"apiUrl": "https://api.loopuman.com"
low line 50

External URL reference

SourceSKILL.md
50curl -X POST https://api.loopuman.com/api/v1/register \
low line 62

External URL reference

SourceSKILL.md
62To add more funds, message [@LoopumanBot](https://t.me/LoopumanBot) on Telegram and link your account.
low line 186

External URL reference

SourceSKILL.md
186- Website: https://loopuman.com
low line 187

External URL reference

SourceSKILL.md
187- Telegram Bot: https://t.me/LoopumanBot
low line 188

External URL reference

SourceSKILL.md
188- ERC-8004 Agent: https://www.8004scan.io/agents/celo/17
low line 189

External URL reference

SourceSKILL.md
189- MCP: https://api.loopuman.com/.well-known/mcp.json
low line 190

External URL reference

SourceSKILL.md
190- A2A: https://api.loopuman.com/.well-known/agent-card.json
Scanned on Feb 16, 2026
View Security Dashboard
Installation guide →