gigaverse
Analysis
This is a coherent crypto-game skill, but it deserves careful review because it stores wallet credentials and can perform autonomous game actions and paid blockchain transactions.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
const privateKey = process.env.NOOB_PRIVATE_KEY; ... const listingId = parseInt(process.argv[2] || '2', 10); ... await client.sendTransaction({ to: GIGAJUICE_CONTRACT, data, value: parseEther(price) });The purchase helper uses a private key and sends an on-chain payment transaction, defaulting to listing 2 if no listing is provided, without an interactive confirmation step in the script.
Gigaverse Check (every 30 minutes) ... If autonomous: level up according to strategy ... Update lastGigaverseCheck timestamp
The skill documents optional periodic background checks and autonomous level-up behavior. This is disclosed and game-related, but it creates ongoing agent activity if the user adds it to a heartbeat.
Source: unknown ... No install spec — this is an instruction-only skill ... Code file presence: 7 code file(s)
The registry provenance/install declaration is sparse even though executable helper scripts and package files are included. This is not evidence of malicious behavior, but it means users should inspect the scripts and dependencies before running them.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
KEY_FILE="${SECRETS_DIR}/gigaverse-private-key.txt" ... echo "$PRIVATE_KEY" > "$KEY_FILE" ... chmod 600 "$KEY_FILE"The setup flow persists a raw blockchain private key locally. That key can authorize wallet actions and control funds/assets, so this is high-impact credential handling even though it is disclosed.