Hk Stock To Gougoubi Prediction

• Analyzed: May 11, 2026, 7:26 AM
• Findings: 0
• Version: 1.0.0
• Hash: 734cf62e5ef63fb73b442bc282f2210d30a707c5039efeca81d7420534e95760
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: hk-stock-to-gougoubi-prediction Version: 1.0.0 The skill bundle is a legitimate workflow orchestrator designed to bridge Hong Kong stock analysis with the Gougoubi prediction market platform. The instructions in SKILL.md provide a deterministic logic for selecting, validating, and formatting financial predictions, including safety filters to avoid illiquid stocks and ambiguous rules. While INSTALL.md and README.md reference external installation scripts (e.g., install-hk-stock-to-gougoubi-prediction-skill.sh) that are not included in the provided files, the analyzed content contains no evidence of malicious intent, data exfiltration, or prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

If the user asks for actual creation, the agent may submit a prediction market proposal rather than only drafting one.

Why it was flagged

The skill can delegate to another skill that may create a public or on-chain prediction proposal. This is purpose-aligned and explicitly user-gated, but the action can have external/public impact.

Skill content

Pass the resulting market to `gougoubi-create-prediction` ... Do not submit on-chain or through the UI unless the user clearly wants actual creation.

Recommendation

Before requesting submission, review the market name, deadline, rules, tags, and any transaction or publication confirmation carefully.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

A user following the repository install instructions could run code that is not included in this artifact set.

Why it was flagged

The install documentation references a helper script path, but no scripts directory or script file is included in the provided manifest. This does not affect the instruction-only ClawHub package, but users installing from an external repository should verify that script first.

Skill content

bash scripts/install-hk-stock-to-gougoubi-prediction-skill.sh

Recommendation

Prefer the reviewed ClawHub artifact or inspect any external repository script before executing it.