功能描述

Market Oracle for prediction market intelligence - Polymarket and Kalshi research, probability assessments, market sentiment analysis, and arbitrage opportunity identification. Use when users want to research prediction markets, analyze betting odds, or find market inefficiencies. Costs $0.03 USDC per request via x402 protocol on Base network.

使用说明 (SKILL.md)

Alpha Finder (Market Oracle)

Name: Alpha Finder (x402)
Author: tzannetosgiannis

Research prediction markets and find alpha using AI-powered market intelligence across Polymarket, Kalshi, and traditional sources.

Configuration

The private key must be available via one of these methods:

Option 1: Environment variable

export X402_PRIVATE_KEY="0x..."

Option 2: Config file (Recommended)

The script checks for x402-config.json in these locations (in order):

Current directory: ./x402-config.json
Home directory: ~/.x402-config.json ← Recommended
Working directory: $PWD/x402-config.json

Create the config file:

{
  "private_key": "0x1234567890abcdef..."
}

Example (home directory - works for any user):

echo '{"private_key": "0x..."}' > ~/.x402-config.json

Usage

Run the market research script with a query about prediction markets or events:

scripts/analyze.sh "\x3Cmarket query>"

The script:

Executes market intelligence research with payment handling
Costs $0.03 USDC per request (Base network)
Searches web, GitHub, Reddit, and X for comprehensive analysis
Returns AI-processed market insights and probability assessments

Examples

User: "What are the odds for Bitcoin hitting $100k?"

scripts/analyze.sh "Bitcoin 100k prediction market odds"

User: "Find arbitrage opportunities in election markets"

scripts/analyze.sh "2024 election prediction market arbitrage"

User: "Analyze Polymarket odds on AI developments"

scripts/analyze.sh "Polymarket AI development predictions"

User: "What's the market sentiment on climate policy outcomes?"

scripts/analyze.sh "climate policy prediction markets Kalshi Polymarket"

Capabilities

Polymarket research - Event analysis and odds tracking
Kalshi market analysis - Regulated prediction market insights
Multi-source intelligence - Searches web, GitHub, Reddit, and X
Probability assessments - AI-powered market sentiment analysis
Arbitrage identification - Spot inefficiencies across markets
Event research - Deep dive into specific prediction market events
Historical tracking - Compare current odds to historical patterns

Data Sources

The tool automatically searches across:

Polymarket events and odds
Kalshi regulated markets
Reddit discussions and sentiment
X/Twitter market commentary
GitHub repositories (for tech-related predictions)
Web sources for news and analysis

Error Handling

"Payment failed: Not enough USDC" → Inform user to top up Base wallet with USDC
"X402 private key missing" → Guide user to configure private key (see Configuration above)
Timeout errors → The API has a 5-minute timeout; comprehensive research may take time

Use Cases

Trading: Find mispriced markets and arbitrage opportunities
Research: Analyze market sentiment on specific events
Due Diligence: Verify market probabilities before betting
Portfolio Management: Track prediction market positions
News Analysis: Understand how events impact market odds

安全使用建议

This skill is suspicious because it asks for a sensitive private key (not declared in registry metadata) and then uses npx to download and run a third‑party npm package at runtime. npx -y runs unvetted code which could exfiltrate any environment variables or files it has access to. Before using this skill: 1) Do not store your main wallet private key in plaintext; use an ephemeral/key with minimal funds and permissions if you must test. 2) Inspect the npm package @itzannetos/x402-tools-claude source (on npm/GitHub) and review what it does with X402_PRIVATE_KEY. 3) Require the skill owner to declare required env vars and binaries (jq, npx) in metadata and to provide a vetted install mechanism or vendored code instead of runtime npx. 4) Prefer running this script in an isolated environment (air‑gapped VM or container) if you must try it. 5) If you cannot verify the npm package and the author's identity, avoid providing any private key or wallet with real funds. Additional information that would change the assessment: an explicit, auditable install artifact (no runtime npx), published source code for @itzannetos/x402-tools-claude that you or a reviewer can inspect, or removal of the need to provide a private key.

功能分析

Type: OpenClaw Skill Name: alpha-finder Version: 1.0.0 The skill is classified as suspicious due to its handling of sensitive credentials and reliance on remote code execution. The `scripts/analyze.sh` file explicitly reads a private key from user configuration files (including `~/.x402-config.json`) and exports it as an environment variable, which is a high-risk operation. Furthermore, the script uses `npx -y @itzannetos/x402-tools-claude` to download and execute an external Node.js package, introducing a supply chain risk as the content of this package is not part of the bundle and could change. While these actions are stated as necessary for payment via the x402 protocol, they represent significant security vulnerabilities without clear malicious intent within the provided files.

能力评估

⚠ Purpose & Capability

The description (market oracle, $0.03 per request via x402) implies on‑chain payments and therefore a private key is plausible — but the registry metadata lists no required env vars or credentials. The SKILL.md and the script both require an X402 private key and discuss Base/USDC payments; that credential requirement is missing from the declared metadata, which is an incoherence.

⚠ Instruction Scope

The SKILL.md instructs the user to place a raw private key in an env var or plaintext config file (~/.x402-config.json or other locations). The included script reads multiple filesystem locations (./, $HOME, $PWD) for the config and exports X402_PRIVATE_KEY into the environment before invoking remote code. The instructions therefore encourage storing and exposing a private key in widely accessible places and do not constrain or limit where the secret may flow.

⚠ Install Mechanism

There is no install spec, but the runtime script calls 'npx -y @itzannetos/x402-tools-claude ...', which will fetch and execute arbitrary code from the npm registry at runtime. That dynamic download/execute behavior is high risk and is not declared in the registry metadata. The script also depends on tools (npx/npm, jq) that are not declared as required binaries.

⚠ Credentials

The skill effectively requires a sensitive credential (X402 private key) and suggests storing it in plaintext in the home directory or passing it via env var; yet the registry metadata lists no required env variables. Passing a private key to unvetted remote code (via env) is disproportionate. Storing a private key in common locations (~/.x402-config.json, ./) increases risk of accidental exposure or exfiltration by other processes.

ℹ Persistence & Privilege

The skill does not request 'always: true' and does not declare persistent installation. However, it recommends writing a persistent config file (~/.x402-config.json) which creates long-lived secret material on disk. The remote npx invocation could also install packages into npm cache but the skill itself does not request system-wide persistence or modify other skill configs.

版本历史

v1.0.0

Alpha Finder 1.0.0 – Initial release - Provides market intelligence on Polymarket, Kalshi, and traditional sources. - Supports research, probability assessments, market sentiment, and arbitrage opportunity detection. - Charges $0.03 USDC per request via x402 protocol on Base network. - Integrates web, GitHub, Reddit, and X/Twitter for comprehensive analysis. - Features AI-powered insights, error handling, and multi-method private key configuration. - Use cases include trading, research, due diligence, portfolio tracking, and news impact analysis.

元数据

Slug alpha-finder

版本 1.0.0

许可证 —

累计安装 9

当前安装数 8

历史版本数 1

常见问题

Alpha Finder (x402) 是什么？

Market Oracle for prediction market intelligence - Polymarket and Kalshi research, probability assessments, market sentiment analysis, and arbitrage opportunity identification. Use when users want to research prediction markets, analyze betting odds, or find market inefficiencies. Costs $0.03 USDC per request via x402 protocol on Base network. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2474 次。

如何安装 Alpha Finder (x402)？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install alpha-finder」即可一键安装，无需额外配置。

Alpha Finder (x402) 是免费的吗？

是的，Alpha Finder (x402) 完全免费（开源免费），可自由下载、安装和使用。

Alpha Finder (x402) 支持哪些平台？

Alpha Finder (x402) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Alpha Finder (x402)？

由 TzannetosGiannis（@tzannetosgiannis）开发并维护，当前版本 v1.0.0。

Alpha Finder (x402)