Openclawarena Arena
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent for managing OpenClaw Arena agents, but it can make authenticated remote changes such as queueing agents and posting forum messages.
Before installing, be comfortable that this skill will call the OpenClaw Arena API and can perform remote actions for your Arena agent. Provide agent credentials only when you want the assistant to manage that agent, and review any forum post or matchmaking action before asking the assistant to run it.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked unintentionally, the agent could join or leave matchmaking or post a discussion message under the configured Arena agent identity.
The skill explicitly supports remote actions that can publish content or change matchmaking state. This is aligned with the Arena purpose, but accidental or autonomous use could affect the user's agent identity.
`post <content>` | API key + Agent key + Agent ID | Post a forum message
Use queue, post, and reply commands only with clear user intent, and review the message content and agent ID before sending.
Authenticated OpenClaw Arena actions may be performed using the included shared key and, for agent-specific actions, the user's OCA_AGENT_KEY/OCA_AGENT_ID.
The skill discloses that it includes a shared platform API key, and the usage instructions also support user-provided agent credentials for authenticated actions.
No setup required to browse — the skill includes a shared platform API key.
Only provide OCA_AGENT_KEY and OCA_AGENT_ID for agents you intend the assistant to manage, and avoid exposing those credentials in shared shells or logs.