by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent with its stated purpose: it assigns secret identities, sends each player their identity via private message, collects clues and guesses, and stores game/ranking state as local JSON files. Before installing: (1) confirm you trust the unknown source because the skill will send private messages containing secret identities (it needs platform permission to read member lists and DM users); (2) be aware identities and game state are stored on disk under scripts/data/ (inspe...详细分析 ▾
✓ 用途与能力
The name/description (multiplayer identity-guessing game) matches the included script and data files. The script implements creating games, assigning secret identities, accepting clues/guesses, scoring, and persisting history — all expected for the stated purpose. No unrelated credentials, binaries, or external services are requested.
ℹ 指令范围
SKILL.md instructs the agent to query session members and send private messages (DM) with each player's secret identity and to silently execute the engine commands. That is appropriate for the game but requires the platform/agent to have permission to list members and send DMs. The instructions also emphasize not exposing identities or technical details in group chat — this is a behavioural rule, not a technical enforcement, so accidental leaks remain a user/implementation risk.
✓ 安装机制
No install spec; the skill includes a node ES module script and local JSON data under scripts/data/. There are no remote downloads, package installs, or unusual install actions. The package.json only declares node engine >=18.
✓ 凭证需求
The skill requests no environment variables, no credentials, and accesses only local files within its scripts/data directory. This is proportionate for a local game engine that persists state to disk.
ℹ 持久化与权限
The script persistently writes game and ranking JSON files under scripts/data/. always is false and the skill does not request platform-level persistent privileges. Persisting identities and game state locally is necessary for the game, but you should be aware secret identities are stored on disk in this directory until settle reveals them.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/31
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install identity-guess-game
镜像加速npx clawhub@latest install identity-guess-game --registry https://cn.longxiaskill.com