agenticbets
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/agenticbets.py) and thebankrCLI tool to perform its primary functions, as documented in the skill metadata and instructions. - [CREDENTIALS_UNSAFE]: The script reads a sensitive API key from the local filesystem at
~/.bankr/config.json. This is the standard location for credentials used by the Bankr CLI, which the skill is designed to integrate with. - [EXTERNAL_DOWNLOADS]: The skill fetches live market data, including token addresses and odds, from
https://agenticbets.dev/api/bankr/markets. This is the primary service endpoint for the prediction market functionality. - [DATA_EXFILTRATION]: The skill sends the user's API key and transaction data to
https://api.bankr.bot. These communications are directed to the official API of the skill's author ('BankrBot') and are necessary for the wallet submission functionality.
Audit Metadata