by 安全扫描
OpenClaw
可疑
medium confidence该技能的说明大体符合博彩预测工具，但存在多处不匹配及未公开的运行时需求（浏览器工具 + 强制写入隐藏主目录），这些在清单中未声明，需谨慎对待。
评估建议
This skill appears to do what it says (scrape betting sites and produce predictions), but exercise caution before installing:
- Missing declarations: SKILL.md requires a 'browser' tool (browser navigate/act/console exec) and persistent file writes under ~/.hermes and ~/.claude/projects/*, yet the manifest lists no required tools or config paths. Confirm your agent environment provides the necessary browser tool and that you are comfortable with these file writes.
- Persistent writes: The skill ...详细分析 ▾
⚠ 用途与能力
The skill claims to auto-scrape betting data and run a prediction framework, which is coherent. However the manifest declares no runtime/tool requirements or config paths, while SKILL.md prescribes browser-based scraping (browser navigate/act/console exec) and writing persistent files under user home directories (~/.hermes/... and ~/.claude/projects/*). These runtime capabilities (a browser tool and filesystem persistence) are required for the described purpose but are not declared in the registry metadata. The description also mentions titan007 and m.nowscore inconsistently (SKILL.md uses m.nowscore).
⚠ 指令范围
The SKILL.md instructs the agent to: navigate to pages with 'browser navigate', execute page JS via 'browser console exec', extract many data points, and mandatory-write predictions/history and framework updates to hidden paths in the user's home directory. It also instructs 'recall ALL pre-match data' and 'auto-fetch' results. These steps go beyond a simple stateless query: they require a browsing tool capable of executing arbitrary JS and persistent write/read access to user memory files. The instructions are prescriptive ('must write', 'not stored = incomplete'), giving the skill broad discretion to read/write local agent memory and project files.
ℹ 安装机制
There is no install spec or code — the skill is instruction-only, which minimizes installation risk. However it implicitly depends on platform tooling (a 'browser' tool with navigate/act/console exec capability) and the agent's ability to write files in the user's home directory; those runtime dependencies are not declared in the manifest.
⚠ 凭证需求
The manifest declares no credentials or config paths, yet the runtime instructions require writing and persisting data into hidden home paths (e.g., ~/.hermes/workspace/memory/football-match-history.md and ~/.claude/projects/*/memory/*). The use of a wildcard path under ~/.claude/projects/* could touch multiple project memories. While these are not external credentials, they are sensitive local storage locations used by the agent platform; the skill's write/read use of them should have been declared and justified. No external network endpoints aside from public data sites are requested.
⚠ 持久化与权限
The skill does not set always:true, but it explicitly requires persistent storage of match history and model parameters to hidden home directories and project memory locations. That persistent presence (writing to ~/.hermes and ~/.claude/projects/*) can give the skill long-term access to user-stored agent memory and cross-session learning. The manifest did not declare this persistence requirement or the target paths, and the wildcard project path increases scope.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/24
football-predict 1.0.0 - 首个版本，基于 m.nowscore.com 抓取数据的足球赛事投注预测系统。 - 采用 5 步量化分析框架，给出投注建议及预测比分。 - 支持简洁与可视化双输出模式，可生成含表格与图表的 HTML 报告。 - 集成赛前数据采集、预测流程与赛后复盘，实现自动学习与准确率追踪。 - 预测结果自动持久化，模型权重持续优化，迭代提升。
● 无害
安装命令
点击复制官方npx clawhub@latest install ballball
镜像加速npx clawhub@latest install ballball --registry https://cn.longxiaskill.com