Skills
skills/sundial-org/awesome-openclaw-skills/sports-ticker/Gen Agent Trust Hub

sports-ticker

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches real-time sports data and match events from ESPN's public API. This is a well-known service used for its intended purpose.
  • [COMMAND_EXECUTION]: Utilizes the openclaw CLI via subprocess.run in scripts/setup_crons.py to manage cron jobs. This interaction is local and restricted to the platform's automation tools.
  • [PROMPT_INJECTION]: Evaluated for indirect prompt injection risks. The skill ingests match data from external APIs.
  • Ingestion points: Untrusted data enters the agent context through scripts/espn.py and scripts/live_monitor.py.
  • Boundary markers: Absent. No delimiters or warnings are used when outputting match data.
  • Capability inventory: Includes subprocess calls in scripts/setup_crons.py and file writing in scripts/config.py, scripts/live_monitor.py, and scripts/setup_crons.py.
  • Sanitization: Absent. External content is not sanitized or escaped before being presented to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 07:05 AM