Sports Odds Scanner

Fetch live sports betting odds from 20+ sportsbooks and compare lines. Supports NFL, NBA, MLB, NHL, soccer, and 30+ sports. Use when asked about odds, lines,...

Security Scan

The skill mostly does what it says (calls The Odds API using curl/jq), but there is an inconsistency in how the required API credential is declared and the package has no authoritative source — verify the ODDS_API_KEY requirement and provenance before installing.

Purpose & Capability

The skill's name/description match the instructions: it fetches odds from The Odds API and compares lines. Requested binaries (curl, jq) are appropriate. However, the registry metadata reported "Required env vars: none" while the SKILL.md includes a credential entry requiring ODDS_API_KEY — this mismatch should be resolved.

Instruction Scope

SKILL.md contains focused, minimal runtime instructions: example curl calls to https://api.the-odds-api.com using $ODDS_API_KEY and a jq filter. It does not instruct the agent to read unrelated files, system paths, or extra environment variables.

Install Mechanism

Instruction-only skill with no install spec and no code files. Low install risk because nothing is written to disk by the skill bundle itself.

Credentials

Functionally the skill only needs a single API key (ODDS_API_KEY) for The Odds API, which is proportionate. The concern is the conflicting metadata: the registry claims no required env vars while the SKILL.md requests ODDS_API_KEY. Also the skill's source/homepage are not authoritative (homepage none, source unknown) which increases risk around trust of any credential you supply.

Persistence & Privilege

always is false and the skill is user-invocable with normal autonomous invocation allowed. That is the platform default and not by itself a red flag.

Scan Findings in Context

[no-regex-findings] expected: No code files to scan; the bundle is instruction-only (SKILL.md). The static scanner had nothing to analyze.

What to consider before installing

This skill appears to legitimately call The Odds API and only needs an API key and curl/jq to work, but two things to check before installing: (1) confirm where the skill package came from and the publisher identity (source/homepage are missing); (2) confirm the registry metadata is updated to declare the ODDS_API_KEY requirement — do not paste high-privilege or shared credentials until you trust the publisher. If you proceed, create an API key scoped for The Odds API only, monitor its usage, and consider rotating or revoking it if anything unexpected appears. Autonomous invocation is allowed by default (normal), so the agent could call the API when the skill is used.

Fetch and compare live betting odds from 20+ sportsbooks via The Odds API.

When to Use

Use this skill when the user asks about:

• Current odds, lines, spreads, or totals for any sport
• Comparing sportsbook lines for a specific game
• Finding the best available line
• Which sportsbooks have the sharpest odds
• Vig or hold percentage for a market

Sport Keys

Common sport keys for the API:

Sport	Key
NFL	americanfootball_nfl
NCAA Football	americanfootball_ncaaf
NBA	basketball_nba
NCAA Basketball	basketball_ncaab
MLB	baseball_mlb
NHL	icehockey_nhl
EPL	soccer_epl
MLS	soccer_usa_mls
La Liga	soccer_spain_la_liga
Champions League	soccer_uefa_champions_league
UFC/MMA	mma_mixed_martial_arts
FIFA World Cup	soccer_fifa_world_cup

For the full list, run the "List active sports" command below.

Operations

1. List Active Sports

Show which sports currently have odds:

curl -s "https://api.the-odds-api.com/v4/sports?apiKey=$ODDS_API_KEY" \
  | jq '[.[] | select(.active==true) | {key, title, description}]'

## About

Built by [AgentBets](https://agentbets.ai) — full tutorial at [agentbets.ai/guides/openclaw-odds-scanner-skill/](https://agentbets.ai/guides/openclaw-odds-scanner-skill/).

Part of the [OpenClaw Skills series](https://agentbets.ai/guides/#openclaw-skills) for the [Agent Betting Stack](https://agentbets.ai/guides/agent-betting-stack/).