PredictMe - AI Trading Agent

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is coherent for a test-balance prediction-market trading agent, but it registers with an external service, stores an API key and preferences, and can place autonomous TEST/BONUS bets.

Install only if you are comfortable sharing an email with PredictMe and allowing the agent to place TEST/BONUS prediction-market bets. Protect the local credential file, set conservative bet limits, consider requiring approval for trades, and verify the PredictMe domain because the registry source/homepage are not provided.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can spend the in-platform test or bonus balance on prediction-market bets.

Why it was flagged

The API can place bets and mutate the PredictMe account balance, though the documented scope is limited to TEST/BONUS balances rather than REAL funds.

Skill content
"path": "/bet", "method": "POST", "auth": true, "description": "Place a bet" ... "balanceType": "string (required) — TEST or BONUS (agents cannot use REAL)"
Recommendation

Set max bet size, stop loss, and approval preferences before allowing the agent to trade; confirm that no real-money balance is available to the agent.

What this means

Your email is sent to PredictMe and the generated API key represents the agent's PredictMe identity.

Why it was flagged

The skill collects an owner email for registration and stores a PredictMe API key for later authenticated trading.

Skill content
owner_email = ask_owner("What email should I register with?") ... api_key = status.data.apiKey ... save_credentials(agent_id, api_key)
Recommendation

Use an email you are comfortable sharing with PredictMe, and store the generated credential in a private, non-shared location.

What this means

You have fewer independent signals to confirm who maintains the skill and whether the artifact matches the provider's intended release.

Why it was flagged

The registry does not provide a source repository or homepage, so users have less provenance information for verifying the package.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the PredictMe domain and API documentation before registering or sharing any information.

What this means

If preferences are wrong or tampered with, the agent may make future bets under unintended risk settings.

Why it was flagged

Persistent preferences can control future trading behavior, including risk level and whether per-trade approval is required.

Skill content
"riskTolerance": "moderate", "maxBetPercent": 5, "stopLoss": -3.0, "profitTarget": 5.0, ... "requireApproval": false
Recommendation

Keep the preferences file under your control, review it before trading sessions, and consider setting requireApproval to true.

What this means

Users may underestimate the speculative nature of the activity.

Why it was flagged

The wording downplays the gambling-like nature of rapid prediction-market betting, even though the rest of the artifacts describe placing bets on 10-second outcomes.

Skill content
**This is not gambling. You are a trader. Act like one.**
Recommendation

Treat this as prediction-market betting, even if only test funds are used, and set conservative limits.