← 返回 Skills 市场
TBD Prediction Market Agent
作者
coreyjoshuamiller
· GitHub ↗
· v1.0.0
· MIT-0
77
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tbd-agent
功能描述
Prediction market for crypto, sports, politics, and culture
安全使用建议
This skill will direct the agent to install and run an unverified npm CLI and to interact with your local API key/wallet to place USDC bets. Before installing or enabling autonomous use: 1) Review the @tbd-vote CLI source (npm page/GitHub) to verify authorship and what the CLI does; 2) Do not allow the agent to run login or commands that spend funds without explicit, per-action confirmation; 3) Be aware the skill expects/read files in your home (~/.tbd/STRATEGY.md) and stored credentials (API key/wallet) even though none are declared in metadata; 4) If you plan to use this, prefer manual control for authentication and for placing bets, or restrict the agent so it cannot execute commands that transfer funds. If you want a stronger assessment, provide the @tbd-vote package repo or the CLI code for review.
功能分析
Type: OpenClaw Skill
Name: tbd-agent
Version: 1.0.0
The skill bundle provides a legitimate interface for the 'TBD' prediction market, enabling agents to manage bets and browse campaigns via the @tbd-vote/cli package or direct API calls to tbd.vote. It demonstrates good security practices by explicitly instructing the agent to have the user handle authentication manually and provides clear, structured guidance for an autonomous betting loop. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力标签
能力评估
Purpose & Capability
The name/description (prediction market agent) align with the instructions (install a tbd-vote CLI, browse campaigns, place bets). However the SKILL.md references local config (~/.tbd/STRATEGY.md) and an API-key based auth flow without declaring required config paths or environment variables in the registry metadata, which is an omission.
Instruction Scope
Runtime instructions tell the agent to install and run a third-party CLI and to perform an 'autonomous loop' that checks balance, browses campaigns, analyzes, and places bets. The guide explicitly says 'do not run the login command yourself' (ask the user to do it) but still expects the agent to run commands that depend on stored credentials, and it instructs reading ~/.tbd/STRATEGY.md. The skill thus expects access to user-local credentials/config and permission to spend USDC — actions that have direct financial impact but are not scoped or constrained in the metadata or instructions.
Install Mechanism
There is no formal install spec in the registry entry; instead SKILL.md instructs a global npm install (npm install -g @tbd-vote/cli). Installing a third-party npm package is a moderate-risk action because npm packages can run arbitrary code; the package org (@tbd-vote) and its provenance are not verified in the metadata. This is an instruction-only skill, so nothing is written by the registry itself, but the agent (if allowed) could execute that npm command.
Credentials
Registry metadata declares no required env vars or config paths, yet the skill header in SKILL.md shows auth_method: api_key and auth_prefix: 'tbd_api_', and the instructions rely on a stored API key and possibly wallet/signing to place USDC bets. The lack of declared credential/config requirements is an inconsistency: the skill requires sensitive local secrets/config to operate but does not advertise them, making it unclear what the agent will access or require.
Persistence & Privilege
always is false and there is no claim the skill modifies other skills or system-wide settings. The skill expects autonomous invocation (default), which would let an agent run the autonomous betting loop; that capability combined with the financial actions described increases risk but is not an exceptional privilege by itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tbd-agent - 安装完成后，直接呼叫该 Skill 的名称或使用
/tbd-agent触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
TBD Agent v1.0.0 — Initial release
- Introduces a CLI and API for participating in prediction markets on crypto, sports, politics, and culture using USDC.
- Allows users to browse campaigns, check balances, configure default bet size, and place bets programmatically or using a CLI.
- Provides detailed CLI command reference and an autonomous operation loop for agents.
- Documents rate limits: 60 reads/min, 10 bets/min.
- Offers raw HTTP endpoints as a fallback for agents without npm access.
元数据
常见问题
TBD Prediction Market Agent 是什么？
Prediction market for crypto, sports, politics, and culture. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 77 次。
如何安装 TBD Prediction Market Agent？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tbd-agent」即可一键安装，无需额外配置。
TBD Prediction Market Agent 是免费的吗？
是的，TBD Prediction Market Agent 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
TBD Prediction Market Agent 支持哪些平台？
TBD Prediction Market Agent 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TBD Prediction Market Agent？
由 coreyjoshuamiller（@coreyjoshuamiller）开发并维护，当前版本 v1.0.0。
推荐 Skills