Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
World Cup 2026 Odds Tracker
v1.1.0Aggregate FIFA World Cup 2026 odds across sportsbooks and prediction markets. Track outright winner futures, group stage odds, and match lines. Compare Polym...
⭐ 0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The description promises aggregation across sportsbooks and prediction markets (mentions Polymarket, group stage odds, match lines). The runtime SKILL.md only contains a single curl against https://api.the-odds-api.com to fetch outright futures from sportsbooks; there is no code or instructions to fetch or compare prediction-market data (Polymarket) or match/group-stage lines. Registry metadata at the top listed no required env vars, but the SKILL.md declares ODDS_API_KEY — this mismatch further weakens coherence.
Instruction Scope
Instructions are limited and explicit: run curl to the-odds-api and process the JSON with jq. They do not reference other files, system paths, or unrelated environment variables. However, they only implement the 'Outright Winner Futures' operation and do not implement other advertised operations (group stage, match lines, prediction markets), which is scope-incomplete and may mislead users.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. It requires curl and jq to be present on PATH — this is proportionate and low install risk.
Credentials
The SKILL.md declares a required credential ODDS_API_KEY (env ODDS_API_KEY) which is proportionate to calling The Odds API. However, the registry metadata summary provided earlier lists 'Required env vars: none', creating an inconsistency between declared runtime credentials and registry-level requirements. Confirm which view is authoritative before providing API keys.
Persistence & Privilege
The skill is not always-enabled and does not request privileged persistence. It can be user-invoked and allows model invocation (the platform default). There is no install script or behavior that modifies other skills or system-wide settings.
What to consider before installing
This skill will make network requests to https://api.the-odds-api.com and (per SKILL.md) expects you to supply an ODDS_API_KEY. Before installing: 1) Verify the registry metadata vs SKILL.md — the registry summary omitted the required ODDS_API_KEY, so confirm the platform will surface and securely store the key. 2) If you expect prediction-market data (Polymarket) or match/group-stage lines, ask the author or inspect a fuller SKILL.md — those sources are not implemented in the provided instructions. 3) Because the source is unknown, validate the claimed author (AgentBets) and the linked guide before entering keys. 4) If you proceed, only provide a least-privilege API key (and consider creating a separate key/account with rate limits and minimal permissions). If you need a firmer assessment, ask the publisher for a full SKILL.md that includes all advertised operations and an explicit manifest matching registry metadata.Like a lobster shell, security has layers — review code before you run it.
agentbetsvk976f0qj5t8nradv9jhxjepfa983jvn7bettingvk976f0qj5t8nradv9jhxjepfa983jvn7latestvk976f0qj5t8nradv9jhxjepfa983jvn7openclawvk976f0qj5t8nradv9jhxjepfa983jvn7prediction-marketsvk976f0qj5t8nradv9jhxjepfa983jvn7sports-bettingvk976f0qj5t8nradv9jhxjepfa983jvn7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏆 Clawdis
Binscurl, jq