← Back to Skills Marketplace
coreyjoshuamiller

TBD Prediction Market Agent

by coreyjoshuamiller · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
77
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tbd-agent
Description
Prediction market for crypto, sports, politics, and culture
Usage Guidance
This skill will direct the agent to install and run an unverified npm CLI and to interact with your local API key/wallet to place USDC bets. Before installing or enabling autonomous use: 1) Review the @tbd-vote CLI source (npm page/GitHub) to verify authorship and what the CLI does; 2) Do not allow the agent to run login or commands that spend funds without explicit, per-action confirmation; 3) Be aware the skill expects/read files in your home (~/.tbd/STRATEGY.md) and stored credentials (API key/wallet) even though none are declared in metadata; 4) If you plan to use this, prefer manual control for authentication and for placing bets, or restrict the agent so it cannot execute commands that transfer funds. If you want a stronger assessment, provide the @tbd-vote package repo or the CLI code for review.
Capability Analysis
Type: OpenClaw Skill Name: tbd-agent Version: 1.0.0 The skill bundle provides a legitimate interface for the 'TBD' prediction market, enabling agents to manage bets and browse campaigns via the @tbd-vote/cli package or direct API calls to tbd.vote. It demonstrates good security practices by explicitly instructing the agent to have the user handle authentication manually and provides clear, structured guidance for an autonomous betting loop. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
Capability Tags
cryptorequires-wallet
Capability Assessment
Purpose & Capability
The name/description (prediction market agent) align with the instructions (install a tbd-vote CLI, browse campaigns, place bets). However the SKILL.md references local config (~/.tbd/STRATEGY.md) and an API-key based auth flow without declaring required config paths or environment variables in the registry metadata, which is an omission.
Instruction Scope
Runtime instructions tell the agent to install and run a third-party CLI and to perform an 'autonomous loop' that checks balance, browses campaigns, analyzes, and places bets. The guide explicitly says 'do not run the login command yourself' (ask the user to do it) but still expects the agent to run commands that depend on stored credentials, and it instructs reading ~/.tbd/STRATEGY.md. The skill thus expects access to user-local credentials/config and permission to spend USDC — actions that have direct financial impact but are not scoped or constrained in the metadata or instructions.
Install Mechanism
There is no formal install spec in the registry entry; instead SKILL.md instructs a global npm install (npm install -g @tbd-vote/cli). Installing a third-party npm package is a moderate-risk action because npm packages can run arbitrary code; the package org (@tbd-vote) and its provenance are not verified in the metadata. This is an instruction-only skill, so nothing is written by the registry itself, but the agent (if allowed) could execute that npm command.
Credentials
Registry metadata declares no required env vars or config paths, yet the skill header in SKILL.md shows auth_method: api_key and auth_prefix: 'tbd_api_', and the instructions rely on a stored API key and possibly wallet/signing to place USDC bets. The lack of declared credential/config requirements is an inconsistency: the skill requires sensitive local secrets/config to operate but does not advertise them, making it unclear what the agent will access or require.
Persistence & Privilege
always is false and there is no claim the skill modifies other skills or system-wide settings. The skill expects autonomous invocation (default), which would let an agent run the autonomous betting loop; that capability combined with the financial actions described increases risk but is not an exceptional privilege by itself.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install tbd-agent
  3. After installation, invoke the skill by name or use /tbd-agent
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
TBD Agent v1.0.0 — Initial release - Introduces a CLI and API for participating in prediction markets on crypto, sports, politics, and culture using USDC. - Allows users to browse campaigns, check balances, configure default bet size, and place bets programmatically or using a CLI. - Provides detailed CLI command reference and an autonomous operation loop for agents. - Documents rate limits: 60 reads/min, 10 bets/min. - Offers raw HTTP endpoints as a fallback for agents without npm access.
Metadata
Slug tbd-agent
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is TBD Prediction Market Agent?

Prediction market for crypto, sports, politics, and culture. It is an AI Agent Skill for Claude Code / OpenClaw, with 77 downloads so far.

How do I install TBD Prediction Market Agent?

Run "/install tbd-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is TBD Prediction Market Agent free?

Yes, TBD Prediction Market Agent is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does TBD Prediction Market Agent support?

TBD Prediction Market Agent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created TBD Prediction Market Agent?

It is built and maintained by coreyjoshuamiller (@coreyjoshuamiller); the current version is v1.0.0.

💬 Comments