Structs Exploration

ReviewAudited by ClawScan on May 14, 2026.

Overview

This instruction-only Structs skill is coherent and transparent, but it can sign real game transactions that move fleets or destroy an old planet if the user approves them.

Install this only if you already trust your `structsd` CLI setup. Before signing any transaction, verify the planet/fleet IDs and safety checks, and do not use prompt-suppression (`-y`) unless you intentionally approve the irreversible action.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the wrong transaction is signed or the checks are skipped, the user could lose in-game assets or strand a fleet.

Why it was flagged

The skill instructs the agent/user to run Structs transaction commands that can make irreversible game-state changes. The same artifact prominently warns about the destruction and includes an approval block, so the behavior is purpose-aligned but important.

Skill content
Explore (subsequent) — You already have a planet. Tier 2 (destroys the old planet). The old planet is released, all structs on it are destroyed, and fleets present are scattered.
Recommendation

Keep the interactive CLI confirmation enabled, verify `currentOre == 0`, fleet `onStation` status, and destination IDs, and avoid `-y` unless the user has explicitly approved the action.

What this means

A command run with the selected key can affect the user’s Structs account and game assets.

Why it was flagged

Using a configured signing key gives the CLI authority to submit transactions as the selected Structs account. The artifact does not show credential logging, theft, or unrelated use, so this is expected integration authority rather than a concern.

Skill content
**Requires**: [`structsd`](https://structs.ai/skills/structsd-install/SKILL) on PATH and a configured signing key.
Recommendation

Use only a trusted `structsd` installation, choose the intended key with `--from [key-name]`, and review transaction prompts before signing.

What this means

Security depends partly on the separately installed `structsd` binary and its key handling.

Why it was flagged

The skill depends on a separately installed external CLI that is not included, pinned, or installed by this instruction-only artifact. This is disclosed and central to the purpose, but users must trust that separate dependency.

Skill content
**Requires**: [`structsd`](https://structs.ai/skills/structsd-install/SKILL) on PATH and a configured signing key.
Recommendation

Install `structsd` only from the official/trusted source and confirm the binary on PATH is the expected one before using this skill.