ClawHub

Punting Buddy: Horse Racing Analysis

v1.0.1

Conversational horse racing analysis, racecard breakdowns, runner comparisons, odds or value chat, and punting-style decision support in the voice of a sharp...

⭐ 0· 65·0 current·0 all-time
by@anupa-perera
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (horse racing analysis, racecards, runner comparisons) aligns with the declared requirements and behavior. No binaries, installs, or unrelated environment variables are requested. The Racing API credentials are plausibly needed only for live data fetches as described.
✓
Instruction Scope
SKILL.md confines runtime actions to reading The Racing API, using screenshots only for race identification/market context, converting times to user local timezone, and staying read-only by default. It does not instruct reading unrelated system files, broad env variables, or exfiltrating data to unknown endpoints.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing will be written to disk or fetched during installation. That keeps the installation surface minimal and proportional to the stated purpose.
✓
Credentials
No environment variables are required for installation. THE_RACING_API_USERNAME and THE_RACING_API_PASSWORD are documented as optional and clearly only required for live API-backed answers; that is proportional to the described functionality. No unrelated credentials or system config paths are requested.
ℹ
Persistence & Privilege
always is false and there is no install-time persistence. The agent policy file sets allow_implicit_invocation: true, meaning the skill can be invoked implicitly by the agent (this is consistent with an interactive skill). This is not inherently problematic, but you should be aware the skill can be called by the agent when relevant.
Assessment
This skill appears to be what it says: a conversational racecard and runner-analysis helper that uses The Racing API for live data. It does not demand any system credentials or install packages to inspect or explain its behavior. If you want live, API-backed answers you will need to add THE_RACING_API_USERNAME and THE_RACING_API_PASSWORD—only provide credentials if you trust the platform and the API account will be used exclusively for this purpose. Note the skill source/homepage is unknown; that doesn't make the skill incoherent, but it's a trust signal: review the skill content and consider creating a dedicated Racing API account (not reusing other credentials) before supplying keys. Also be mindful that screenshots you share may contain personal or sensitive info; only upload images you are comfortable sharing.

Like a lobster shell, security has layers — review code before you run it.

analysisvk97cwk8cbm9wvxad0rtdq6ywjs83tfcmhorse-racingvk97cwk8cbm9wvxad0rtdq6ywjs83tfcmlatestvk973kkqcvg5r7ywe8fkex2x1f183t5gzresultsvk97cwk8cbm9wvxad0rtdq6ywjs83tfcm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments