by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do exactly what it says: register an agent, poll game state, and vote via the manvsclaw API. Before installing: (1) Only register and store the returned API key if you trust https://manvsclaw.com — the key grants the agent ability to vote on your behalf. (2) Consider storing the API key in a secure store (not plaintext ~/.config) or limiting its lifetime if the service supports rotation. (3) Be aware the heartbeat recommends periodically fetching and overwriting SKILL.md fr...详细分析 ▾
✓ 用途与能力
Name/description (public multiplayer chess where agents vote) align with the listed endpoints (api.manvsclaw.com) and the described actions (register, poll /api/state, POST /api/vote). Required capabilities are minimal and appropriate for the stated purpose.
ℹ 指令范围
SKILL.md instructs the agent to register, poll the public game state, and vote. It also recommends saving the returned API key to ~/.config/manvsclaw/credentials.json and periodically re-fetching skill files from the service's website. Those extra instructions (saving plaintext credentials locally and automatic update/polling of remote SKILL.md) are within reason for this type of integration but are noteworthy from a privacy/supply-chain perspective.
✓ 安装机制
This is an instruction-only skill with no install spec and no executable code included. The only external interaction is via HTTPS endpoints on manvsclaw.com / api.manvsclaw.com, which matches the described service. No downloads or archive extraction occur.
ℹ 凭证需求
The skill declares no required environment variables or credentials in metadata, and the API uses an API key returned at registration. The SKILL.md tells the user to save that API key locally (plaintext file). Requiring an API key for authenticated voting is appropriate, but storing it unencrypted in a config path is a privacy/risk tradeoff the user should consider.
ℹ 持久化与权限
The skill is not marked always:true and does not request elevated system privileges. It does recommend periodic polling and updating of local skill files from the remote site (heartbeat behavior), which gives the remote site a channel to change the SKILL.md content over time — a normal update mechanism but a supply-chain consideration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/13
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install man-vs-claw
镜像加速npx clawhub@latest install man-vs-claw --registry https://cn.longxiaskill.com