ClawHub

Liberfi Predict

v1.0.0

Browse and trade prediction markets: list events with filtering and search, view event details and embedded markets, check USDC balances on Kalshi and Polyma...

⭐ 0· 60·0 current·0 all-time
by@bombmod
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe browsing and trading prediction markets; the allowed commands and parameter list map directly to those operations (read-only queries plus explicit mutating commands for Kalshi and Polymarket). The skill does not ask for unrelated credentials, binaries, or config paths.
ℹ
Instruction Scope
The SKILL.md focuses on invoking the LiberFi CLI and documents both read-only queries and mutating commands. It explicitly warns to never fabricate signatures and to require explicit user confirmation for orders. This is appropriate, but the presence of mutating commands (kalshi-submit, polymarket-order) means callers must ensure confirmation is enforced before execution.
✓
Install Mechanism
Instruction-only skill with no install spec or code files — nothing is downloaded or written to disk by the skill itself.
✓
Credentials
The skill declares no required env vars or credentials. Polymarket auth is handled via explicit CLI flags (poly-*) as documented — this is proportionate. There are no requests for unrelated secrets or system-wide credentials.
✓
Persistence & Privilege
always:false (no forced inclusion). The skill does allow mutating operations, but it does not request elevated or persistent privileges. Note: platform-default autonomous invocation remains possible; users should ensure the agent will not run mutating commands without explicit confirmation.
Assessment
This skill appears coherent for a CLI wrapper around LiberFi prediction-market features. Before installing: (1) Make sure you install the official LiberFi CLI from a trusted source (SKILL.md references bootstrap docs). (2) Be careful with Polymarket credentials and signed transactions — the skill expects you to provide Polymarket CLOB flags or a signed Kalshi transaction; never paste private keys or signatures you don't understand. (3) If you allow autonomous agent actions, require explicit user confirmation for any order/submit commands so trades are not executed without your consent. (4) Prefer passing short-lived credentials or using the CLI interactively rather than embedding secrets into persistent agent environment variables.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b264rrkfsyz6ka5spzqgae1843xj0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments