ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Silke Manifold

v1.0.0

Search, analyze, and trade on Manifold Markets prediction markets by checking odds, placing bets, viewing portfolios, and managing positions with API-based c...

⭐ 0· 589·0 current·0 all-time
by@silverstone-louis
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (python3), and required env var (MANIFOLD_API_KEY) match the code's behaviour (calls to api.manifold.markets for querying and trading). The CLI commands implemented correspond to the documented functionality.
ℹ
Instruction Scope
SKILL.md instructs running the included Python CLI and documents the available commands. The code does auto-load a data/.env file located relative to the script (parent parent/data/.env) and merges any key/value pairs into os.environ, which SKILL.md does not mention; this could surface additional environment variables if the packaged data/.env exists. Otherwise the instructions and script only call Manifold's API and print JSON.
ℹ
Install Mechanism
There is no install spec (instruction-only), which minimizes install risk. The script declares a dependency on 'requests' in a comment but doesn't install it; users must ensure python3 and requests are available in the runtime. No network downloads or external installers are used by the skill itself.
ℹ
Credentials
Only MANIFOLD_API_KEY is required and set as the primary credential, which is appropriate. The script's behavior of loading a local data/.env can introduce additional environment variables if that file exists; those are not declared in requires.env and could include secrets if packaged inadvertently.
✓
Persistence & Privilege
The skill does not request persistent or elevated platform privileges; always is false and it does not modify other skills or global agent config. It only reads environment and calls the Manifold API.
Assessment
This skill appears to do what it says: manage and trade on Manifold using your MANIFOLD_API_KEY. Before installing or running it, confirm you trust the skill source and provide only your Manifold API key (do not reuse high-privilege keys). Note the script will try to auto-load a data/.env file next to the code and inject those values into the environment — ensure no sensitive secrets are packaged there. Also make sure python3 and the 'requests' package are available in the runtime. When placing bets, follow the SKILL.md advice to use --dry-run first to confirm behavior before committing real funds.

Like a lobster shell, security has layers — review code before you run it.

latestvk973j4vzfc0dfbmzt7w5t29phn8159jw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📈 Clawdis
Binspython3
EnvMANIFOLD_API_KEY
Primary envMANIFOLD_API_KEY

Comments