WaitingForMacGuffin
v1.3.0Oscar prediction market intelligence from waitingformacguffin.com. Get live odds, whale activity, price movements, precursor awards, order book depth, and fr...
⭐ 1· 655·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: the SKILL.md tells the agent to call public waitingformacguffin.com APIs to produce market summaries, research, and bet recommendations. Required binaries (curl) are appropriate and minimal for the stated purpose.
Instruction Scope
Instructions limit runtime actions to running curl against the service's public endpoints and formatting responses. The doc does not instruct the agent to read local files, access unrelated env vars, or send data to other endpoints. It does ask the agent to provide betting recommendations and slippage calculations (expected for a market-intelligence skill).
Install Mechanism
No install spec and no code files — instruction-only skill. That minimizes disk writes and arbitrary code execution risk.
Credentials
Skill requires no environment variables, no credentials, and no config paths. The public API is documented as unauthenticated, so no secret access is requested or needed.
Persistence & Privilege
Skill is not forced-always (always: false). It is user-invocable and allowed to be called autonomously per platform defaults, which is expected for skills and acceptable here. It does not request persistent system-wide privileges.
Assessment
This skill calls a public API (waitingformacguffin.com) via curl and does not request any credentials or install code, which is coherent with its description. Before installing: (1) verify the service home/repo (https://github.com/sonderspot/waitingformacguffin-public) if you want source transparency; (2) remember the skill may produce betting recommendations — treat them as informational, not professional financial advice; (3) confirm your agent's network policy is acceptable because the skill will make outbound HTTPS requests; and (4) if you plan to supply personal betting account details in conversation, avoid giving secrets inside chat — the skill does not require them and you should not share credentials in plain chat.Like a lobster shell, security has layers — review code before you run it.
latestvk9749p74gf3hs4e7xym4w7zza182txkj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl