スキル aimpact-prediction-market
📦
aimpact-prediction-market
v1.0.1 コンテンツリビジョン r1 高リスク 🌐 ネットワークアクセス⚙️ 外部コマンド
Monitor Prediction Markets for Material Changes
Prediction market changes can be difficult to track across frequent updates. This skill polls approved feeds and formats alerts for notable events and movements.
対応: Claude Codex Code(CC)
インストール前に停止して確認を求めてください。
計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "aimpact-prediction-market" from https://skillstore.io/skills/me-news-aimpact-prediction-market.md and its manifest at https://skillstore.io/api/skills/me-news-aimpact-prediction-market/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「aimpact-prediction-market」を使用しています。 Check popular prediction-market events.
期待される結果:
Popular event update: Event A is at 62 percent with elevated volume. Review the linked market source before making decisions.
「aimpact-prediction-market」を使用しています。 Find large trades from the latest feed.
期待される結果:
Large trade alert: A $250,000 Yes trade moved the event probability from 38 to 42 percent. Source validation is recommended.
「aimpact-prediction-market」を使用しています。 Show rapid probability changes.
期待される結果:
Probability alert: Event B rose 13 percentage points in one hour while volume reached 5.2 times its daily average.
セキュリティ監査
高リスクv1 • 2026/8/5 バージョン別レポートを開く
The skill intentionally contacts two publisher-controlled API endpoints and includes an opt-in Windows command that creates a recurring scheduled task. Most other static alerts are Markdown syntax or plain-text examples, but remote API content is processed without explicit validation or instruction-isolation safeguards.
5
スキャンされたファイル
459
解析済み行数
8
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (2)
高
Windows scheduled task creation
schtasks /create /tn "预测市场监控" /tr "openclaw agent --message '检查预测市场变化'" /sc minute /mo 15
The command creates a recurring Windows scheduled task that invokes an agent every 15 minutes. This is an explicit persistence mechanism and can continue network and message activity after the initial session.
中
Untrusted API Content Enters Agent Processing
The workflow analyzes publisher-controlled API responses and forwards selected text into alerts without requiring schema validation or explicit instruction isolation.
The workflow clearly fetches two remote feeds, extracts their fields, analyzes them, and formats notifications. No validation or rule to ignore instructions embedded in returned text is documented.
機能レビュー項目 (8)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
中
Ruby/shell backtick execution
2. **调用 API(优先 `curl`,`web_fetch` 兜底)**:按 `sources.md` 配置,优先使用 `curl` 调用预测市场数据源 API
The instruction explicitly directs the agent to invoke the external curl binary against configured endpoints. External process execution expands the skill's operational authority even though the arguments are intended to be fixed.
中
Ruby/shell backtick execution
- 仅当 `curl` 不可用或请求失败时,才使用 `web_fetch` 对同一 URL 兜底重试
The line directs curl execution and a web-fetch fallback for remote requests. This is intentional external command and network behavior, not merely a formatted identifier.
中
Ruby/shell backtick execution
- `sources.md` 中所有 URL 均为 API endpoint,必须优先使用 `curl` 获取数据。
The rule explicitly requires using the external curl binary for every configured API endpoint. This creates real subprocess and outbound-network behavior.
中
Ruby/shell backtick execution
- 仅当 `curl` 不可用或请求失败时,才允许使用 `web_fetch` 对同一 URL 兜底重试。
The rule specifies curl execution with web_fetch as a fallback. The behavior is deliberate external process and network access.
中
Ruby/shell backtick execution
- 建议优先使用 `curl` 调用 API endpoint
The line recommends invoking the external curl binary for API access. That is intentional subprocess and outbound-network behavior.
中
Ruby/shell backtick execution
- `web_fetch` 仅作为兜底手段(`curl` 不可用或失败时)
The line defines web_fetch as a fallback after curl execution fails. It confirms intentional external request behavior despite using Markdown formatting.
低
Hardcoded URL
| MetaEra Prediction 快讯 | https://agent.me.news/skill/flash/list?page=1&size=20&category=prediction
The endpoint is an active publisher-controlled API that the monitoring workflow intentionally requests. Remote responses enter agent processing, creating a real trust boundary.
低
Hardcoded URL
| ME News Poly Events | https://agent.me.news/skill/poly/events?page=1&size=20&active_only=true | AP
The endpoint is an active publisher-controlled API that the monitoring workflow intentionally requests. Remote responses enter agent processing, creating a real trust boundary.
リスク要因
🌐 ネットワークアクセス (9)
⚙️ 外部コマンド (29)
SKILL.md:41 SKILL.md:84 SKILL.md:85 SKILL.md:93-96 SKILL.md:96-99 SKILL.md:99-102 SKILL.md:102-116 SKILL.md:116-117 SKILL.md:117-122 SKILL.md:122-132 SKILL.md:132-136 SKILL.md:136-137 SKILL.md:137 SKILL.md:141 SKILL.md:148-152 SKILL.md:152 SKILL.md:153 SKILL.md:154-160 SKILL.md:160-167 SKILL.md:167-170 SKILL.md:170-177 SKILL.md:177-180 SKILL.md:180-187 SKILL.md:187-190 SKILL.md:190-197 SKILL.md:197-200 SKILL.md:200-201 SKILL.md:201 SKILL.md:99
検出されたパターン
Windows scheduled task creation
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/me-news-aimpact-prediction-market/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/me-news-aimpact-prediction-market?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/me-news-aimpact-prediction-market?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/me-news-aimpact-prediction-market/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/me-news-aimpact-prediction-market.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
me-news. (2026). aimpact-prediction-market security audit report (audit version 1) [Author version 1.0.1]. Skillstore. https://skillstore.io/skills/me-news-aimpact-prediction-market/audits/1BibTeX形式の引用
@techreport{me-news-me-news-aimpact-prediction-market-2026,
author = {me-news},
title = {aimpact-prediction-market security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/me-news-aimpact-prediction-market/audits/1},
note = {Author version 1.0.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "aimpact-prediction-market security audit report (audit version 1)"
version: "1.0.1"
type: report
authors:
- name: "me-news"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/me-news-aimpact-prediction-market/audits/1"
identifiers:
- type: other
value: "skillstore:me-news-aimpact-prediction-market:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
100
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Review Current Market Activity
Summarize active events and material probability changes before a research session.
Detect Unusual Trading
Highlight large trades and rapid market movements for manual investigation.
Publish Scheduled Alerts
Send formatted monitoring updates through an approved and preconfigured message channel.
これらのプロンプトを試す
Check Popular Events
Check the approved prediction-market feeds and list the current popular events with probabilities and source links.
Find Large Trades
Review the latest feed data for trades above $100,000. Include event, direction, amount, probability impact, and source.
Analyze Probability Moves
Identify events with at least a 10 percent hourly move or 20 percent daily move. Explain available evidence and data limitations.
Assess Potential Opportunities
Compare current probabilities with available historical values. Rank deviations, explain assumptions, cite sources, and include risk notes without presenting financial advice.
ベストプラクティス
- Validate important alerts against primary market sources before acting.
- Start with manual checks before enabling recurring jobs or message delivery.
- Use conservative polling intervals and review API rate limits.
回避
- Do not treat generated opportunity labels as financial advice.
- Do not enable scheduled jobs without explicit approval and removal instructions.
- Do not forward unvalidated remote text into privileged agent instructions.
よくある質問
Which data sources does this skill use?
It uses two configured ME News endpoints for prediction news and active event data.
Does this skill place trades?
No. It analyzes feed data and produces informational alerts only.
Can it send notifications?
Yes, but only through an OpenClaw message channel that the user configured separately.
Does monitoring start automatically?
No scheduler is bundled. Recurring checks require a user-configured cron job or Windows scheduled task.
Are the opportunity alerts financial advice?
No. Users should review source data, market rules, liquidity, and personal risk before making decisions.
What happens when an API request fails?
The instructions allow web_fetch as a fallback and require reporting the HTTP status and a short error summary.
開発者情報
作成者
me-newsライセンス
MIT
作者バージョン
v1.0.1
Skillstore リビジョン
r1
参照
e5f4ac55b99872f66a36ead0049c5c56486976b8
メンテナンスの新しさ
2026/8/5
利用状況
0 ダウンロード · 0 閲覧
ファイル構成