Acca Tracker

• Risk level: Low
• Analyzed: Apr 15, 2026, 9:16 PM
• Findings: 0
• Version: 1.3.1

Overview

The skill's files and instructions are internally consistent with a live-score accumulator tracker: it needs no secrets, uses an included shell helper and public APIs, and its behavior matches the description, though there are some metadata/package inconsistencies you should review before installing.

This skill appears to do what it says: parse a betting slip, run a local helper script, and poll public score APIs periodically. Before installing, check two practical things: (1) packaging metadata mismatches (version/author and plugin manifest omitting the scripts file) — ensure the helper script is actually present in the installed package so cron jobs work; (2) you are comfortable allowing the agent to create a cron job that will run repeatedly and make outbound requests to public APIs (TheSportsDB, ESPN). No credentials are requested and no hidden endpoints were found, but if you need provenance, ask the publisher for a canonical homepage or signed release and confirm which file set/version they intend you to run.