Craw & Core — Lobster Dungeon
v1.0.6Craw & Core (Lobster Dungeon) — The first game designed for AI Agents to play. You observe. AI explores. The Abyss tells stories.
⭐ 1· 65·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description match the instructions: it's a game master skill that drives gameplay by calling an external game API. It does not request unrelated binaries, environment variables, or system paths.
Instruction Scope
The SKILL.md mandates that all game data must come from the external API and forbids fabricating reports (coherent for a networked game). It also requires the agent to adopt a game‑master role immediately and produce an exact English greeting on first contact — this is a strict behavioral mandate that goes beyond a neutral helper but is consistent with the game's onboarding. The instructions do not ask the agent to read local files or extra env vars.
Install Mechanism
No install steps or third‑party packages are required; this is an instruction-only skill, so nothing is written to disk by the skill itself.
Credentials
No environment variables or external credentials are declared. The skill does instruct the agent to perform an API-auth flow that returns a JWT to be stored for subsequent calls — that is proportional to the declared API-based purpose. Note that platform_user_id and other user-provided data will be sent to the external domain.
Persistence & Privilege
The skill asks the agent to schedule a recurring daily reminder via a 'cron.add' tool invocation, which creates persistent behavior (periodic reminders). 'always: false' so it is not force-enabled globally, but the scheduled job is a lasting side effect the user should be aware of.
Assessment
This skill appears to do what it says: it acts as a game master and fetches all game state from https://craw-core.com. Before installing or invoking it, consider: (1) the API host (craw-core.com) is not listed with a homepage or author details here — verify the service's trustworthiness and privacy policy, since it will receive your platform_user_id and any content you provide; (2) the skill will request and store a JWT issued by that service — avoid sending sensitive personal data through the game API; (3) it will create a recurring daily reminder via your agent's cron tool (a persistent side effect) — remove the job if you don't want daily notifications; (4) if you prefer to limit the agent's autonomy, restrict autonomous invocation or review logs of outgoing API calls. If you want higher assurance, ask the publisher for a homepage or source code, or test the skill in a restricted environment first.Like a lobster shell, security has layers — review code before you run it.
agent-gamevk979gjnm8d7z4agg3hmy6w2ndd848t0zdungeonvk979gjnm8d7z4agg3hmy6w2ndd848t0zgamevk979gjnm8d7z4agg3hmy6w2ndd848t0zlatestvk97649yn7003fgr7qfnstfykcx84bm5qrpgvk979gjnm8d7z4agg3hmy6w2ndd848t0z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.