gigaverse

This skill appears to be a legitimate Gigaverse game agent: it generates/imports a wallet, signs a message to get a JWT, polls the game API, and can send on‑chain transactions (minting, buying subscriptions). Before installing: - Use a dedicated bot wallet with minimal funds; never import a main or large-value key. The scripts store private keys in ~/.secrets — protect that directory (permissions) or keep it in an isolated environment. - Inspect the scripts locally before running. purchase-juice.ts requires NOOB_PRIVATE_KEY as an env var (not declared in registry metadata) — avoid exporting high-value private keys to env variables; prefer the setup wallet file method if you run these tools. - The skill sends agent_metadata (including model name) to the API during auth; if you care about model privacy, be aware this is transmitted. - Running scripts requires Node/npm and the viem library (from npm). Install dependencies from official registries and consider running in a sandbox/container. - If you want lower risk, run only read-only actions (energy checks, state queries) without authenticating or providing a private key. If you want me to, I can: point out the exact lines where private keys are read/written, suggest minimal changes to avoid env exposure, or produce a checklist to run the skill safely (sandbox steps, permission checks).