Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Odds Converter

v1.1.0

Convert between American odds, decimal odds, fractional odds, implied probability, and Kalshi contract prices. Use when asked to convert odds formats, explai...

0· 57·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the runtime instructions: the SKILL.md provides direct conversion formulas for American, decimal, fractional, implied probability, and Kalshi prices and explicitly requires python3, which is necessary to run the provided snippets.
Instruction Scope
Instructions are narrowly scoped to numeric conversions and formatting. One operational caveat: the skill tells the agent to run python3 -c with placeholders (e.g., ODDS, DEC) that must be replaced before execution. If an agent naively interpolates unsanitized user input into a shell command, that could permit code injection. The skill itself does not instruct reading files, environment variables, or external endpoints.
Install Mechanism
No install spec or third-party download; this is instruction-only and requires only an existing python3 binary, which is proportionate and low-risk.
Credentials
No environment variables, credentials, or config paths are requested. The required binary (python3) is directly justified by the provided inline Python snippets.
Persistence & Privilege
always is false and the skill does not request persistent system presence or modify other skills. Autonomous invocation is allowed (default), which is expected for skills of this type.
Assessment
This skill appears coherent and limited to odds conversions and requires only python3. Before installing, ensure the agent replaces placeholders safely (don’t interpolate raw user text into shell/python -c commands) to avoid code-injection risks. Confirm your agent has python3 available and that you trust the agent to handle numeric input sanitization. No credentials or network access are required by the skill.

Like a lobster shell, security has layers — review code before you run it.

agentbetsvk976r0nm6qt220v663hnnp6mfx83kqn7bettingvk976r0nm6qt220v663hnnp6mfx83kqn7latestvk976r0nm6qt220v663hnnp6mfx83kqn7openclawvk976r0nm6qt220v663hnnp6mfx83kqn7prediction-marketsvk976r0nm6qt220v663hnnp6mfx83kqn7sports-bettingvk976r0nm6qt220v663hnnp6mfx83kqn7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🔄 Clawdis
Binspython3

Comments