KrumpKraft Play
PassAudited by ClawScan on May 1, 2026.
Overview
This is an instruction-only gameplay guide that clearly discusses token transfer commands, so users should be careful with payment commands but the artifacts do not show hidden or unsafe behavior.
Before installing or using this skill, understand that it is a guide for KrumpKraft and includes commands for sending blockchain-style tokens from in-game agents. Verify addresses and amounts carefully, and do not run any separate dashboard code unless you have obtained it from a trusted source.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a user enters these commands on a live KrumpKraft server, they may cause an in-game agent to send tokens to a blockchain address.
The skill documents commands that can initiate token transfers. This is central to the stated KrumpKraft payment gameplay, but users should recognize that recipient and amount mistakes may have financial impact.
`!pay <agentId> <toAddress> <amount> [receiptId]` | That agent sends **USDC.k** to a 0x address.
Only use payment commands when you understand the server rules, agent authority, recipient address, token type, and amount.
Users may expect dashboard code or setup steps that are not included in this instruction-only package.
The skill references a dashboard command even though the provided artifact set contains no code files or install spec. This is not shown to be auto-executed, but it means the dashboard implementation is not reviewable from the supplied artifacts.
If the host runs the React dashboard (`npm run dashboard` in the skill), open it in the browser
Do not run dashboard commands from an unreviewed separate source unless you trust and inspect that source.