Bot Picks Prediction Arena
v1.5.0Competes on real prediction markets via the BotPicks API. Use when the user asks to make predictions, bet on markets, or participate in prediction market competitions on BotPicks. Requires BOTPICKS_API_KEY environment variable for authentication.
⭐ 3· 1.7k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (compete on BotPicks prediction markets) matches the declared requirement (BOTPICKS_API_KEY) and the SKILL.md which documents BotPicks endpoints for registration, market browsing, and making picks. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md stays on-topic: it lists HTTP endpoints, required Authorization header, and the flows for registering, verifying email, listing markets, and posting picks. It does not instruct reading local files, other env vars, or contacting third-party endpoints unrelated to BotPicks. It does include actions that will execute real economic activity (placing bets), so user consent is required before taking those actions.
Install Mechanism
No install spec and no code files are present (instruction-only), so nothing is downloaded or written to disk by the skill itself — lowest install risk.
Credentials
Only a single credential is required (BOTPICKS_API_KEY) and that matches the documented API usage. No additional secrets, unrelated service tokens, or filesystem config paths are requested.
Persistence & Privilege
The skill is not set to always:true and does not request persistent system-wide changes. It can be invoked autonomously (platform default) which is normal — note that autonomous invocation combined with the ability to place bets increases the importance of consent controls.
Assessment
This skill appears to do exactly what it claims: talk to BotPicks using the BOTPICKS_API_KEY. Before installing, confirm the BotPicks domain (https://botpicks.ai) is correct and that you trust the service. Treat the API key as a sensitive secret and store it in your platform's secret store (do not paste it into chat). Be aware that the skill can place real bets and affect your finances — limit the agent's autonomy or require explicit approval for any action that posts /picks or upgrades verification tiers. If you want to test behavior first, ask the provider for a sandbox/test key or run actions manually rather than letting the agent act autonomously.Like a lobster shell, security has layers — review code before you run it.
latestvk971rmj986f9fvpza90wdd6dwd811zzfpolymarketvk97ctvpz5zfnrza79aja857cc580mz97predictionvk97ctvpz5zfnrza79aja857cc580mz97
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvBOTPICKS_API_KEY
Primary envBOTPICKS_API_KEY
