Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Manifold Markets helper whose network calls and authenticated trade/comment actions match its stated purpose, with explicit confirmation instructions for writes.
Install this only if you want an agent to interact with your Manifold account. Keep the MANIFOLD_API_KEY private, confirm every bet, sale, or comment only after checking the market and exact payload, and remember that comments may be public and may incur fees.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Write actions require `MANIFOLD_API_KEY` (in the environment or configured via OpenClaw skill entries).
Base URL: `https://api.manifold.markets/v0`
Docs: https://docs.manifold.markets/api
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
USER_ID="$(curl -s "https://api.manifold.markets/v0/user/USERNAME" | jq -r '.id')"
curl -s "https://api.manifold.markets/v0/bets?userId=$USER_ID&limit=50"
Without jq, fetch the user JSON and read the id field, then use it:
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
curl -s "https://api.manifold.markets/v0/bets?userId=USER_ID&limit=50"
## Write safety rules
- Never place a bet, sell shares, or post a comment unless the user explicitly confirms (e.g. “yes, place it”, “confirm”, “do it”).
- Always fetch the market first and restate: market question, market id/slug, action (bet/sell/comment), side/answer, amount/shares, and any limits.
This command performs an authenticated state-changing POST that places a real bet using the MANIFOLD_API_KEY. Although the skill text requires explicit confirmation, the example still enables irreversible financial/account actions against an external service if a calling agent misinterprets confirmation, is prompt-injected, or executes the POST prematurely.
curl -s -X POST "https://api.manifold.markets/v0/bet" \
-H "Authorization: Key $MANIFOLD_API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount":10,"contractId":"MARKET_ID","outcome":"YES"}'
This authenticated POST sells shares and can liquidate a user's position, including an example that sells all shares when shares is omitted. Because it triggers a consequential account action with API credentials, accidental or manipulated execution could cause direct financial loss.
Sell all shares for an outcome (omit shares to sell all):
curl -s -X POST "https://api.manifold.markets/v0/market/MARKET_ID/sell" \
-H "Authorization: Key $MANIFOLD_API_KEY" \
-H "Content-Type: application/json" \
-d '{"outcome":"YES"}'
This is another authenticated sell endpoint example, here for a specific number of shares. It still creates real external side effects using a stored API key, so any weakness in confirmation handling or prompt boundary enforcement can lead to unauthorized trades.
Sell a specific number of shares:
curl -s -X POST "https://api.manifold.markets/v0/market/MARKET_ID/sell" \
-H "Authorization: Key $MANIFOLD_API_KEY" \
-H "Content-Type: application/json" \
-d '{"outcome":"YES","shares":10}'
Posting a comment is a state-changing authenticated action and the text notes it may incur a fee. Even though the intended use is legitimate, unauthorized execution could cause reputational harm, spam, or unwanted charges on the user's account.
Comments made through the API can incur a fee (see Manifold API docs). Always confirm text + target market.
curl -s -X POST "https://api.manifold.markets/v0/comment" \
-H "Authorization: Key $MANIFOLD_API_KEY" \
-H "Content-Type: application/json" \
-d '{"contractId":"MARKET_ID","content":"Your comment here."}'
No suspicious patterns detected.