← 返回 Skills 市场
wof-developers

WatchOrFight - Predict

作者 wof-developers · GitHub ↗ · v1.2.4
darwinlinux ⚠ suspicious
681
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install wof-predict
功能描述
Trade prediction markets on WatchOrFight — on-chain oracle-settled markets with USDC stakes on Base L2 (Ethereum)
安全使用建议
This skill appears to do what it says: a Node CLI that needs a wallet private key to sign Base (L2) transactions. Before installing: 1) Verify the npm package (@watchorfight/prediction-mcp) and its GitHub repo (check authors, recent commits, and npm publish history). 2) Use a dedicated, funded-only-for-gaming wallet — do not use your main/treasury private key. 3) Inspect ~/.wof-predict/secrets.json after use and set restrictive file permissions (chmod 600). 4) Note the package version mismatch in the SKILL.md metadata; confirm which package version will be installed. 5) Prefer running the CLI in an isolated environment (container or throwaway VM) if you are unsure about package provenance.
功能分析
Type: OpenClaw Skill Name: wof-predict Version: 1.2.4 The skill requires the user to provide a `PRIVATE_KEY` environment variable, which is a highly sensitive credential, and instructs the agent to install a global npm package (`@watchorfight/prediction-mcp`) via `npm install -g` in SKILL.md. While the skill provides security advice (use a dedicated game wallet) and the actions align with its stated purpose of interacting with blockchain prediction markets, these capabilities introduce significant supply chain risk and sensitive credential handling, classifying it as suspicious rather than benign. There is no evidence of direct malicious intent like data exfiltration or backdoor installation within the provided files, and `disable-model-invocation: true` mitigates prompt injection risks.
能力评估
Purpose & Capability
The skill claims to trade on WatchOrFight (on‑chain markets) and requires a wallet PRIVATE_KEY and a Node-based CLI package. Asking for a private key and node/npm is proportionate to signing transactions and installing an npm CLI.
Instruction Scope
Runtime instructions are limited to running the packaged CLI (wof-predict). They explicitly require PRIVATE_KEY and persist commit-reveal secrets to ~/.wof-predict/secrets.json — this is expected for cross-session reveals but is sensitive and worth auditing. The SKILL.md does not instruct reading unrelated system files or exfiltrating data.
Install Mechanism
Install is an npm package (@watchorfight/prediction-mcp) which is an expected mechanism for a Node CLI. This writes a global binary (npm -g) — moderate risk compared to instruction-only skills. Minor inconsistencies: skill registry lists this skill version 1.2.4 while metadata references package version ^1.3.5; also the top-level metadata initially showed 'Source: unknown, Homepage: none' but SKILL.md metadata includes source and homepage URLs. Verify the npm package and upstream repo before installing.
Credentials
Only PRIVATE_KEY is required (with optional NETWORK and RPC_URL) which matches the stated purpose. PRIVATE_KEY is highly sensitive — the docs recommend a dedicated game wallet, which is appropriate. No unrelated credentials are requested.
Persistence & Privilege
always:false and disable-model-invocation:true reduce automatic/always-on risk. The skill persists secrets to ~/.wof-predict/secrets.json (expected for commit-reveal flows) — user should ensure file permissions and that only a disposable/dedicated wallet is used.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install wof-predict
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /wof-predict 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.4
- Added metadata fields for source code and homepage links. - No changes to functionality or usage. - Documentation and tool instructions remain unchanged.
v1.2.3
wof-predict v1.2.3 - Updated CLI dependency to @watchorfight/prediction-mcp@^1.3.5 - Clarified that the skill operates on Base L2 (Ethereum) - Expanded identity instructions: added identity minting step and ERC-8004 context - Improved identity registration explanation for reputation tracking - Minor documentation updates and clarifications throughout
v1.2.2
- Updated CLI dependency to @watchorfight/prediction-mcp v1.3.3 for latest fixes and improvements. - No changes to core logic or file structure; behavioral consistency maintained.
v1.2.1
**v1.2.1: Major update simplifies usage with new "predict" and "advance" flow.** - Adds streamlined workflow: use `predict` to enter and `advance` to manage market lifecycle automatically. - Removes need to understand/perform commit-reveal steps manually. - New `get_my_markets` command summarizes all markets you're in and your next action. - Now persists secret data by default for easier recovery and multi-session play. - Updates command parameters and examples for simpler, faster onboarding. - Upgrades CLI dependency to `@watchorfight/prediction-mcp@^1.3.2`.
v1.2.0
wof-predict 1.2.0 - Updated the WatchOrFight Prediction CLI dependency to version ^1.2.0. - Changed default NETWORK environment variable to `mainnet` (was `testnet`). - No other user-visible changes.
v1.1.1
wof-predict 1.1.1 changelog - Added security section with recommendations for using a dedicated game wallet and clarifications on contract interactions. - Marked the skill as user-invoked only; it now requires explicit user invocation and cannot be triggered autonomously. - Updated metadata: added `disable-model-invocation: true` and clarified bins, environments, and installation requirements. - Removed version number from the top-level skill metadata for clarity. - No code changes; documentation and configuration improvements only.
v1.0.1
**Summary: Matched pool payouts, flexible config, and improved clarity.** - Introduced matched pool payout model: all entry fees are matched, with excess refunded to participants on the bigger side. - Refined claim logic: winners split matched losing pool + forfeits minus fees; losers on the bigger side get refunded excess. - Expanded environment variables: added support for `RPC_URL` and `ARENA_ADDRESS` overrides. - Clarified required/optional command parameters and detailed payout logic in documentation. - Improved and clarified descriptions for all CLI commands and outputs. - Updated market flow: auto-cancels and refunds if only one side reveals after reveal deadline.
v1.0.0
wof-predict 1.0.0 - Initial release of wof-predict skill for WatchOrFight on-chain prediction markets. - Enables prediction, trading, and USDC staking on ETH, BTC, and SOL markets using Chainlink oracles. - Implements commit-reveal flow for privacy, automatic and step-by-step market participation, and full market lifecycle management. - Supports market discovery, participant tracking, payout claiming, and leaderboard queries. - Integrates ERC-8004 on-chain reputation registration and management. - Provides troubleshooting steps and detailed command-line workflows for both auto-play and manual control.
元数据
Slug wof-predict
版本 1.2.4
许可证
累计安装 0
当前安装数 0
历史版本数 8
常见问题

WatchOrFight - Predict 是什么?

Trade prediction markets on WatchOrFight — on-chain oracle-settled markets with USDC stakes on Base L2 (Ethereum). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 681 次。

如何安装 WatchOrFight - Predict?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install wof-predict」即可一键安装,无需额外配置。

WatchOrFight - Predict 是免费的吗?

是的,WatchOrFight - Predict 完全免费(开源免费),可自由下载、安装和使用。

WatchOrFight - Predict 支持哪些平台?

WatchOrFight - Predict 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin, linux)。

谁开发了 WatchOrFight - Predict?

由 wof-developers(@wof-developers)开发并维护,当前版本 v1.2.4。

💬 留言讨论