WaitingForMacGuffin
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: waitingformacguffin Version: 1.3.0 The 'waitingformacguffin' skill provides Oscar prediction market intelligence by fetching data from waitingformacguffin.com via curl. It includes tools for market summaries, nominee research, and precursor-based betting simulations. The instructions in SKILL.md are focused on data presentation, including specialized formatting for Telegram, and do not contain evidence of malicious intent, data exfiltration, or harmful prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may make web requests to waitingformacguffin.com for Oscar market answers; the declared Read permission is broader than the visible task requires, although no local-file use is instructed.
The skill is allowed to run curl commands, which is central to its public API lookup purpose, but it also declares the Read tool even though the visible instructions do not describe reading local files.
allowed-tools: Bash(curl *), Read
Use the skill for non-sensitive Oscar market queries, and avoid asking it to process local private files unless you intentionally want that.