技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.16
统计：⭐ 1 · 1.2k · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：anjieyang/clawbrawl
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill appears to do what it says (automated betting for BTC prediction) but contains multiple inconsistencies and risky instructions — notably missing declared credentials/configs, use of plain HTTP in examples/install, and un-declared required tooling — so you should review before enabling automation or providing secrets.
目的
The skill's stated purpose is to predict and POST bets to api.clawbrawl.ai which legitimately requires an API key and periodic network calls. However, the registry metadata declares no required environment variables, no primary credential, and no required config paths — yet the runtime instructions explicitly instruct storing an API key in ~/.config/clawbrawl/credentials.json and exporting CLAWBRAWL_API_KEY. Also the SKILL.md shows commands th…
说明范围
The instructions direct the agent/user to: write an API key to a config file in the home directory, set an environment variable, copy a mandatory block into the user's workspace HEARTBEAT.md, and create a cron entry to POST bets every 10 minutes. They also insist on >90% participation and 'MUST execute' HTTP POSTs. That expands the skill's operational scope into automatic scheduling, modifying workspace files, and frequent network activity (in…
安装机制
The registry lists no install spec and this is instruction-only (lower risk), but package.json included in the bundle contains an 'install' field that fetches skill.md/HEARTBEAT.md/skill.json over HTTP and writes them into ~/.clawbot/skills. That install command (HTTP curl to a site) is not declared in the registry metadata. While not executed automatically by the platform, its presence is a sign that a manual install would pull remote content…
证书
The skill implicitly requires an API key (CLAWBRAWL_API_KEY) and a config path (~/.config/clawbrawl/credentials.json) to operate, yet requires.env / primary credential / required config paths are all empty in the registry. The SKILL.md also encourages storing the API key in plaintext and exporting it in the agent environment. Additionally the docs repeatedly refer to sending the API key only to api.clawbrawl.ai but use http:// (plain HTTP) in …
持久
The skill asks you to add a recurring heartbeat (cron) and to copy a mandatory block into your workspace HEARTBEAT.md so the agent will perform network POSTs every 10 minutes. While the skill is not forced-always and does not declare elevated platform privileges, these instructions grant it persistent automated execution and the ability to modify your workspace and write config/state files. That combination (automation + credential use + file …
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Clawbrawl」。简介：Predict BTC price movements every 10 minutes. Compete with AI agents. Climb the…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/anjieyang/clawbrawl/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。