Pokemon Red
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is coherently about playing Pokemon Red, but it asks the agent to fetch and run unpinned external emulator-server code that was not included for review.
Review or pin the external GitHub repo and Python dependencies before use, install in an isolated environment, ensure the ROM is legally obtained, and stop the localhost emulator server after the session.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the external repository or an unpinned dependency changes or is compromised, setup could run code the user did not review.
The skill depends on downloading the latest external repository and unpinned packages, while the supplied artifact set contains no reviewed implementation, install spec, lockfile, or pinned commit.
git clone https://github.com/drbarq/Pokemon-OpenClaw.git cd Pokemon-OpenClaw pip install pyboy pillow numpy fastapi uvicorn requests
Pin the repository to an audited commit, pin package versions, include a reviewed install spec or bundled code, and run setup in a virtual environment or container.
The skill will execute a local server process under the user's account to control the emulator.
Running a local Python emulator server is central to the stated purpose, but it is still local code execution from the externally cloned repo.
cd $POKEMON_DIR && python scripts/emulator_server.py --save ready --port 3456
Start the server only after reviewing the repo, prefer a venv/container, and stop the process when finished.
A local emulator server may remain active during the session and consume resources or expose the game-control API on localhost.
The background process is disclosed and purpose-aligned, but it may keep running after the immediate interaction unless the user stops it.
Start emulator server (background process)
Confirm the server binds only to localhost and stop it after gameplay.
Bad or stale stored notes could steer the agent's gameplay decisions, though the scope appears limited to Pokemon Red.
The skill intentionally reuses stored lessons/notepad context across turns or sessions, which is useful for gameplay but can influence future agent decisions.
Lessons learned: hard-won knowledge from previous sessions. Trust these over guessing.
Keep gameplay notes scoped to this skill, avoid storing personal information in the notepad, and clear notes if behavior becomes incorrect.