足球赛事预测神器。自动采集 titan007.com 数据（亚盘、大小球、欧赔、基本面、阵容、角球、半全场）， 5 步量化分析框架，输出投注建议与预测比分。Football match betting prediction system. Auto-scrapes data from m.nowscore.com...

This skill appears to do what it says (scrape betting sites and produce predictions), but exercise caution before installing: - Missing declarations: SKILL.md requires a 'browser' tool (browser navigate/act/console exec) and persistent file writes under ~/.hermes and ~/.claude/projects/*, yet the manifest lists no required tools or config paths. Confirm your agent environment provides the necessary browser tool and that you are comfortable with these file writes. - Persistent writes: The skill mandates saving match-history and model updates to hidden directories in your home (~/.hermes/... and ~/.claude/projects/*/memory/...). That will persist data across sessions and could interact with other project memories (wildcard path). If you do not want persistent storage or cross-project writes, do not install or modify the SKILL.md to change the storage path. - JS execution risk: The skill instructs executing page JS via browser console exec for extraction. That lets the agent run arbitrary JavaScript on scraped pages. Only enable if you trust the scraping targets and the skill author. - Data privacy & legality: Scraping betting sites and storing records may have legal or policy implications depending on jurisdiction and site terms of service; review legality and site policies first. - Publisher/source uncertainty: The package metadata references a GitHub URL but the top-level metadata says 'Source: unknown' and 'Homepage: none' — verify the code/repository and author before trusting persistent access. Recommended actions before installing: 1) Ask the author to declare explicit runtime dependencies (browser tool) and the exact filesystem paths in the manifest. 2) Run the skill in a sandboxed agent environment or a throwaway account with no sensitive memories to see what it writes. 3) Inspect any files the skill creates (back them up and review contents) and remove or relocate them if needed. 4) If you don't want cross-project memory modification, request the author change the wildcard path (~/.claude/projects/*) to a single, explicit directory under the skill's control. Given these unexplained declarations and the mandatory persistent writes, treat the skill as suspicious until the above concerns are resolved.

Type: OpenClaw Skill Name: ballball Version: 1.0.0 The skill bundle implements a football betting prediction system that scrapes data from m.nowscore.com and uses a quantitative analysis framework. It includes instructions for the agent to maintain a local 'memory' of match history and model weights in the ~/.hermes/ and ~/.claude/ directories to improve accuracy over time. The behavior is consistent with the stated purpose, and there are no signs of data exfiltration, malicious execution, or harmful prompt injection.