Search, analyze, and trade on Manifold Markets prediction markets by checking odds, placing bets, viewing portfolios, and managing positions with API-based c...
Security Analysis
high confidenceThe skill's code, instructions, and required MANIFOLD_API_KEY align with its stated purpose (trading on Manifold); nothing in the files indicates unexplained credential access or external endpoints, but review a couple of small implementation notes before use.
Name/description, required binary (python3), and required env var (MANIFOLD_API_KEY) match the code's behaviour (calls to api.manifold.markets for querying and trading). The CLI commands implemented correspond to the documented functionality.
SKILL.md instructs running the included Python CLI and documents the available commands. The code does auto-load a data/.env file located relative to the script (parent parent/data/.env) and merges any key/value pairs into os.environ, which SKILL.md does not mention; this could surface additional environment variables if the packaged data/.env exists. Otherwise the instructions and script only call Manifold's API and print JSON.
There is no install spec (instruction-only), which minimizes install risk. The script declares a dependency on 'requests' in a comment but doesn't install it; users must ensure python3 and requests are available in the runtime. No network downloads or external installers are used by the skill itself.
Only MANIFOLD_API_KEY is required and set as the primary credential, which is appropriate. The script's behavior of loading a local data/.env can introduce additional environment variables if that file exists; those are not declared in requires.env and could include secrets if packaged inadvertently.
The skill does not request persistent or elevated platform privileges; always is false and it does not modify other skills or global agent config. It only reads environment and calls the Manifold API.
Guidance
This skill appears to do what it says: manage and trade on Manifold using your MANIFOLD_API_KEY. Before installing or running it, confirm you trust the skill source and provide only your Manifold API key (do not reuse high-privilege keys). Note the script will try to auto-load a data/.env file next to the code and inject those values into the environment — ensure no sensitive secrets are packaged there. Also make sure python3 and the 'requests' package are available in the runtime. When placing bets, follow the SKILL.md advice to use --dry-run first to confirm behavior before committing real funds.
Latest Release
v1.0.0
Initial publish – my own copy
Popular Skills
Published by @silverstone-louis on ClawHub
