← 返回 Skills 市场
Sdk
作者
cannedoxygen
· GitHub ↗
· v1.0.2
· MIT-0
102
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install sdk
功能描述
AI-powered sports betting simulations with Monte Carlo analysis
安全使用建议
This package appears to be a legitimate SDK for paid sports-simulation calls that uses Solana payments, and the code shows local transaction signing and API polling — which is expected. However: 1) Do NOT provide your main Solana private key to the agent. A private key in an environment variable gives full control of that wallet (ability to transfer funds). 2) Verify the package source and integrity (npm page, repository, checksums). The skill metadata here shows 'Source: unknown' even though package.json references edgebets.fun and a GitHub URL — confirm those links and check the upstream repo history and npm publisher. 3) Test with a throwaway wallet containing minimal funds (e.g., only enough USDC/SOL to run a single simulation) before using any real funds. 4) Prefer using a signing wallet adapter (wallet adapter or hardware wallet) that never exposes the raw secret to the runtime, or create a dedicated wallet with limited balance. 5) Verify the TREASURY_WALLET address and endpoints (api.edgebets.fun) independently. 6) If you need higher assurance, review the full payment-related code paths (payment.ts/simulation.ts) to confirm no network calls leak secret material and to confirm signature/proof flow is local. If you cannot verify the source, treat this skill as risky for holding any non-trivial funds.
功能分析
Type: OpenClaw Skill
Name: sdk
Version: 1.0.2
The EdgeBets skill bundle provides a legitimate sports betting simulation service using the x402 payment protocol on the Solana blockchain. It requires a SOLANA_PRIVATE_KEY to sign 0.50 USDC transfers for paid simulations, but the SDK (src/services/payment.ts) performs all signing locally using standard libraries and only transmits the transaction signature to the API (https://api.edgebets.fun) as proof of payment. The instructions in SKILL.md are transparent regarding costs and functionality, and no evidence of credential theft, unauthorized data exfiltration, or malicious prompt injection was found.
能力评估
Purpose & Capability
The skill is an SDK that runs paid Monte Carlo simulations and performs on-chain payments via Solana. Requiring Node and a Solana private key is coherent with the stated purpose (it needs a wallet to pay $0.50 USDC per simulation). The codebase contains expected services (games, payment, simulation, picks) and constants for the API and treasury address.
Instruction Scope
SKILL.md explicitly instructs using process.env.SOLANA_PRIVATE_KEY to construct the client and to fund simulations; the instructions and included code reference api.edgebets.fun endpoints and the x402 payment flow only. There are no obvious instructions to read unrelated system files or to exfiltrate arbitrary data. However the SKILL.md and package README both instruct the agent (or developer) to provide the wallet secret in environment or file form — that grants the skill full control of that wallet.
Install Mechanism
There is no external install script that downloads arbitrary binaries or runs remote installers. The package contains source and a built dist/ bundle and would be installed via npm (edgebets-sdk). No network downloads from untrusted shorteners or extract/install steps are present in the skill metadata.
Credentials
The skill requires a single environment variable: SOLANA_PRIVATE_KEY. This is proportionate to performing on-chain payments, but a private key is extremely sensitive. Supplying it to the agent or storing it in an environment variable gives the SDK (and anything that can use the SDK) the ability to sign and submit arbitrary Solana transactions. The skill also includes a hard-coded treasury wallet address for payments — users should verify that address before sending funds.
Persistence & Privilege
The skill does not request 'always: true' and does not declare system config paths or other skills' credentials. It operates when invoked and does not assert permanent elevated presence in the agent.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install sdk - 安装完成后,直接呼叫该 Skill 的名称或使用
/sdk触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
Added pick of the day and track record features
元数据
常见问题
Sdk 是什么?
AI-powered sports betting simulations with Monte Carlo analysis. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 102 次。
如何安装 Sdk?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sdk」即可一键安装,无需额外配置。
Sdk 是免费的吗?
是的,Sdk 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Sdk 支持哪些平台?
Sdk 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Sdk?
由 cannedoxygen(@cannedoxygen)开发并维护,当前版本 v1.0.2。
推荐 Skills