Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Expected Value Calculator

v1.1.0

Calculate expected value for any sports bet or prediction market position. Supports American odds, decimal odds, implied probability, and Kalshi contract pri...

0· 81·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required binary (python3), and runtime instructions all align with computing expected value for bets and prediction-market positions. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions are an inline python3 command that reads two command-line arguments (odds and estimated probability) and prints EV, edge, and a verdict. The instructions do not access files, environment secrets, or network endpoints. Minor implementation caveats: the script's input parsing is simplistic (e.g., percent detection uses a >1 numeric check, limited handling of formats like '40%' or other variants), which may misinterpret some inputs but is not a security issue.
Install Mechanism
No install spec; instruction-only skill. This minimizes disk writes and supply-chain risk. The only runtime requirement is python3 being available on PATH.
Credentials
No environment variables, credentials, or config paths are requested. The declared requirements match what the skill does.
Persistence & Privilege
always:false and user-invocable:true (defaults). The skill does not request persistent or elevated privileges and does not modify system or other-skill configuration.
Assessment
This skill appears coherent and low-risk: it runs a local python3 one-liner using only the odds and probability you pass in and does not send data elsewhere. Before installing, verify you trust the skill source (registry owner) and that python3 on the host is the expected interpreter. Be aware the script uses simple parsing and may mis-handle some input formats (e.g., '40%' or unusual odds strings); if you need broader input support or stricter validation, request an updated SKILL.md or a version that runs a small packaged script with explicit input validation. If you want extra caution, run the single python command locally yourself to confirm its behavior before enabling the skill for automated use.

Like a lobster shell, security has layers — review code before you run it.

agentbetsvk972gc2072g1qrsvc7n8jxp6d583k4v2bettingvk972gc2072g1qrsvc7n8jxp6d583k4v2latestvk972gc2072g1qrsvc7n8jxp6d583k4v2openclawvk972gc2072g1qrsvc7n8jxp6d583k4v2prediction-marketsvk972gc2072g1qrsvc7n8jxp6d583k4v2sports-bettingvk972gc2072g1qrsvc7n8jxp6d583k4v2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📈 Clawdis
Binspython3

Comments