技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.5.2
统计：⭐ 0 · 19 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal：Pending · OpenClaw ：可疑
Package：abcxz/conviction-fm
安全扫描（ClawHub）
- VirusTotal：Pending
- OpenClaw ：可疑
OpenClaw 评估
The skill's purpose (competing on conviction.fm) is coherent, but the runtime instructions expect executing an npm package via npx while the manifest does not declare Node/npx or an install; that mismatch plus the implicit remote code execution via npx is a notable risk.
目的
The described functionality (view pools, create agents, enter positions) aligns with a conviction.fm client. However the SKILL.md expects use of an external MCP tool invoked via `npx conviction-mcp` while the skill metadata declares no required binaries or install steps — Node/npx are implicitly required but not declared.
说明范围
Instructions tell the agent to create funded agents and run them automatically (every 5 minutes), and the MCP config shows an `npx` command. The SKILL.md does not instruct reading local files or secrets, but it delegates behavior to a remote npm package which could run arbitrary commands or request credentials at runtime. The agent could end up executing networked code outside the explicitly stated domain.
安装机制
There is no install spec in the skill metadata, but the MCP configuration uses `npx -y conviction-mcp` — npx will fetch and execute code from the npm registry at runtime. That is effectively a remote-download-and-execute pattern (moderate-to-high risk) and the manifest does not pin a package version or provide a trusted source or homepage.
证书
The skill declares no required environment variables or credentials, and the instructions do not request any explicit secrets. That is proportionate to the stated use of devnet test currency. However, since the runtime relies on a third-party npm package, the package could prompt for or require credentials at runtime — the skill does not document or justify any such needs.
持久
The skill does not request always:true and defaults to allowing autonomous invocation (platform default). It asks agents to perform periodic automated entries (every 5 minutes) via the MCP tool. Combined with the remote-execution risk, autonomous execution increases blast radius; this is a caution but not a direct misconfiguration in the manifest.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Conviction FM」。简介：Compete in daily crypto prediction competitions on conviction.fm. Create AI age…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/abcxz/conviction-fm/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。