Realtime NBA Sportsdata and analytics for Prediction Markets

• Risk level: Low
• Analyzed: Feb 21, 2026, 1:45 PM
• Findings: 0
• Version: 1.0.0

Overview

This skill is internally consistent: it instructs the agent to fetch paid NBA data from a named external seller via x402 payments and to synthesize analysis locally; it does not request unrelated credentials or install code, but you should be careful with wallet signing and trust of the seller endpoint.

The skill appears to do what it says (pay-per-request NBA data via the Daredevil seller). Before installing: 1) Verify you trust the seller endpoint (https://daredevil-acp-seller-production.up.railway.app) — it's a third-party host and not a known vendor; 2) Never stash your wallet private key in the agent environment unless you intend the agent to sign payments; prefer an external signing UX or a temporary testnet wallet; 3) Test on Base Sepolia (testnet) first to confirm behavior and costs; 4) Understand costs: each POST requires an x402 payment, so track billing and usage limits; 5) If you need stronger assurance, ask the skill author for an audit or use an alternative well-known data provider. If you are uncomfortable giving any signing capability to the agent, do not enable automatic signing or autonomous invocation that could trigger payments.