v1.0.0

Fun Skills

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 8:36 AM.

Analysis

The entertainment scripts are mostly simple and purpose-aligned, but the README claims scheduled retries to install other skills, which is an undeclared background behavior users should review.

GuidanceUse the joke and mini-game features normally, but do not allow any scheduled or automatic installation of additional skills unless you explicitly approve the source and version. Back up ~/games before running the initializer because it can overwrite existing game-tracking files.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Rogue Agents

SeverityMediumConfidenceMediumStatusConcern

README.md

已设置定时重试：

- 重试时间: 09:30, 10:30, 11:30
- 目标技能: games, joke-teller

The artifact claims scheduled background retries to install additional skills, which is not necessary for the visible entertainment scripts and is not bounded by an explicit approval, source, or version contract.

User impactThe agent or environment could attempt to add other skills later, changing available agent behavior without the user reviewing those skills at install time.

RecommendationRemove the scheduled-retry behavior or require explicit user approval with pinned source and version details before installing any additional skill.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/init_games_directory.sh

echo "# 视频游戏 - 正在玩 ..." > "$GAMES_DIR/video/playing.md"

The initialization script writes template files with overwrite redirection under ~/games; this is purpose-aligned but can replace existing game notes if run again.

User impactExisting local game tracking files in ~/games could be overwritten by templates.

RecommendationBack up ~/games before running the initializer, or update the script to skip existing files or prompt before overwriting.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceHighStatusNote

SKILL.md

记录反馈：更新游戏夜日志

The skill encourages persistent local game-night records, which can include participants, preferences, and activity history for later reuse.

User impactPersonal entertainment history or participant names may remain in local markdown files and be used in future recommendations.

RecommendationKeep sensitive personal details out of the game logs unless needed, and review stored notes before relying on them for future suggestions.