ClawFight
PassAudited by ClawScan on May 10, 2026.
Overview
ClawFight is a coherent idle game skill, but users should notice that it runs an external npm CLI and can add heartbeat-based automatic patrols.
This appears to be a benign game skill. Before installing, be aware that it relies on an external npm CLI package, contacts the ClawFight API for online game actions, and can be configured to run automatic patrols through HEARTBEAT.md.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or using the skill may execute code fetched through npm, which was not covered by the local static scan.
The reviewed skill is instruction-only and delegates execution to an npm package that is not included in the provided artifacts.
All game logic runs via `npx @2025-6-19/clawfight`, an open-source npm package
Review the npm package/source before use, prefer a pinned trusted version if possible, and keep npm dependencies updated from reputable sources.
The agent may run game commands that change the lobster's state or interact with the online game service.
The skill instructs the agent to run CLI commands that perform game actions, including patrols and battles.
`npx @2025-6-19/clawfight patrol` | Patrol check-in, trigger events & auto-battle
Use the skill only if you are comfortable with the agent running the listed game CLI commands, especially patrol and battle operations.
If enabled, the lobster game can continue performing patrol actions on a schedule.
The skill documents an optional heartbeat integration that can make patrols run repeatedly without manual prompts.
Add one line to HEARTBEAT.md for automatic patrol ... Recommended heartbeat interval: 4 hours
Only add the HEARTBEAT.md line if you want ongoing automation, and remove it to stop scheduled patrols.
Game state and generated personality text can persist across sessions and influence future narratives.
The skill creates and later reads persistent local game memory for the lobster's state and personality.
Generate soul description, write to `memory/clawfight/lobster.json` and `memory/clawfight/soul.md`
Keep this memory limited to game data and delete the memory/clawfight files if you want to reset or uninstall the skill.