by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions generally match a betting-prediction tool, but there are several mismatches and undisclosed runtime requirements (browser tooling + mandatory writes to hidden home directories) that are not declared in the manifest and deserve caution.
评估建议
This skill appears to do what it says (scrape betting sites and produce predictions), but exercise caution before installing:
- Missing declarations: SKILL.md requires a 'browser' tool (browser navigate/act/console exec) and persistent file writes under ~/.hermes and ~/.claude/projects/*, yet the manifest lists no required tools or config paths. Confirm your agent environment provides the necessary browser tool and that you are comfortable with these file writes.
- Persistent writes: The skill ...详细分析 ▾
⚠ 用途与能力
The skill claims to auto-scrape betting data and run a prediction framework, which is coherent. However the manifest declares no runtime/tool requirements or config paths, while SKILL.md prescribes browser-based scraping (browser navigate/act/console exec) and writing persistent files under user home directories (~/.hermes/... and ~/.claude/projects/*). These runtime capabilities (a browser tool and filesystem persistence) are required for the described purpose but are not declared in the registry metadata. The description also mentions titan007 and m.nowscore inconsistently (SKILL.md uses m.nowscore).
⚠ 指令范围
The SKILL.md instructs the agent to: navigate to pages with 'browser navigate', execute page JS via 'browser console exec', extract many data points, and mandatory-write predictions/history and framework updates to hidden paths in the user's home directory. It also instructs 'recall ALL pre-match data' and 'auto-fetch' results. These steps go beyond a simple stateless query: they require a browsing tool capable of executing arbitrary JS and persistent write/read access to user memory files. The instructions are prescriptive ('must write', 'not stored = incomplete'), giving the skill broad discretion to read/write local agent memory and project files.
ℹ 安装机制
There is no install spec or code — the skill is instruction-only, which minimizes installation risk. However it implicitly depends on platform tooling (a 'browser' tool with navigate/act/console exec capability) and the agent's ability to write files in the user's home directory; those runtime dependencies are not declared in the manifest.
⚠ 凭证需求
The manifest declares no credentials or config paths, yet the runtime instructions require writing and persisting data into hidden home paths (e.g., ~/.hermes/workspace/memory/football-match-history.md and ~/.claude/projects/*/memory/*). The use of a wildcard path under ~/.claude/projects/* could touch multiple project memories. While these are not external credentials, they are sensitive local storage locations used by the agent platform; the skill's write/read use of them should have been declared and justified. No external network endpoints aside from public data sites are requested.
⚠ 持久化与权限
The skill does not set always:true, but it explicitly requires persistent storage of match history and model parameters to hidden home directories and project memory locations. That persistent presence (writing to ~/.hermes and ~/.claude/projects/*) can give the skill long-term access to user-stored agent memory and cross-session learning. The manifest did not declare this persistence requirement or the target paths, and the wildcard project path increases scope.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/24
football-predict 1.0.0 - Initial release of a football match betting prediction system using scraped data from m.nowscore.com. - Features a 5-step quantitative analysis framework and provides betting recommendations with predicted scores. - Supports both concise and visual output modes, including HTML reports with tables and charts. - Includes pre-match data collection, prediction workflow, and post-match review for automated learning and accuracy tracking. - Automatic persistence of predictions and optimized model weights for continuous improvement.
● 无害
安装命令
点击复制官方npx clawhub@latest install ballball
镜像加速npx clawhub@latest install ballball --registry https://cn.longxiaskill.com