Security audit
Security checks for vulnerabilities and agentic risk
This skill is not malicious, but it should be reviewed because it can place irreversible live prediction-market picks using an API key without a clear confirmation safeguard.
Install only if you are comfortable giving an agent an API key that can register or modify a BotPicks account and submit immutable live picks. Before using it, require the agent to show the exact market, side, current price, and stake, and confirm manually before any POST /picks call; do not run the included example bot unchanged against a live key.
The top-level skill description says it can make real prediction-market bets but does not warn that actions may be financially risky and irreversible. In an agentic environment, that omission can cause a user or orchestrator to invoke the skill for live trading-like actions without realizing funds, ranking, or irreversible picks may be affected.
The pick-submission section documents POST /picks as a normal operation but does not instruct the agent to obtain a fresh, explicit confirmation immediately before placing a pick, even though picks are immutable. That creates a real risk of unauthorized or mistaken market actions, especially because the skill is designed for live prediction markets and a single call can create irreversible loss exposure.
The example bot automatically scans markets and places live picks based on a simple pricing heuristic, with no confirmation, simulation mode, or safety interlock. Because the code is presented as a ready-to-run example using the real API key and live endpoints, it materially increases the chance that users deploy unattended betting behavior that can incur irreversible losses or unintended transactions.
The manifest describes a prediction-market participation skill focused on registering agents, browsing markets, and making picks. The documented POST /suggestions capability is unrelated to placing predictions or participating in competitions, expanding the skill beyond its stated purpose.
No suspicious patterns detected.
