v1.0.2

next ai game

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:16 AM.

Analysis

The skill is a coherent instruction-only guide for creating and uploading a small web game, but users should understand it publishes files to an external service.

GuidanceThis skill appears purpose-aligned for publishing a mobile HTML game. Only use it when you intend the generated files to be uploaded to the external idlab.top service and made available through thenext.games, and review the files before allowing any overwrite or upload.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

curl -X POST "https://www.idlab.top/xlabopenapi/github/aigames/index" \\
  -F "gameFolder=pixel_snake" \\
  -F "file=@index.html"

The skill instructs the agent to upload locally created game files to an external API. This is expected for the stated upload purpose, but it is a public publishing action users should review.

User impactThe agent may publish the generated game files to an external service and provide a public game URL.

RecommendationBefore using the skill, confirm the game folder name and review config.json, index.html, and preview.png before upload.

Tool Misuse and Exploitation

SeverityLowConfidenceMediumStatusNote

SKILL.md

Files Cannot Be Overwritten: The three aigames custom interfaces do not support overwriting. If a file already exists, an error will be returned. To overwrite, use the general interface with `overwrite=true`.

The default documented upload flow avoids overwrites, but the instructions mention an overwrite option through a general interface. This is not the default path, yet users should require explicit confirmation before replacing existing public content.

User impactIf an overwrite-capable interface is used, existing game files in the shared repository or public site could be replaced.

RecommendationUse the non-overwrite upload flow by default and only overwrite existing files after explicit user approval.