Destiny Weaver
v2.2.0回合制异世界人生模拟游戏引擎。玩家穿越到随机生成的异世界，体验从出生到死亡的完整人生。每回合推进时间和世界发展，提供事件选择，记录完整故事并生成场景/角色插图。支持代代相传、自由行动系统。
⭐ 1· 120·0 current·0 all-time
byfslong@fslong520
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match required behaviors: world/character/event generation, per-turn output, background novel generation, and image prompts. The skill only requires reading internal reference files and writing story/save files which are consistent with a game engine; no unrelated credentials, binaries, or external services are requested.
Instruction Scope
SKILL.md explicitly instructs the agent to read many local reference files (references/*.md), generate events and narrative, and silently append novel paragraphs to story files in stories/ and saves/. That is coherent for the described game. However, a regex pre-scan flagged unicode-control-chars in SKILL.md (possible prompt-injection attempt or formatting artifact) — the presence of control characters should be inspected in the raw file to confirm they're benign.
Install Mechanism
No install specification and no code to download or execute were provided (instruction-only). This minimizes filesystem/remote-install risk.
Credentials
The skill requests no environment variables, credentials, or system config paths. All declared file accesses are internal (references/, assets/, saves/, stories/) and are proportionate to a game that persists saves and generated images.
Persistence & Privilege
The skill is allowed to Read/Write/Edit within the skill workspace and will persist game state and generated novels/images to stories/ and saves/. always:false and no model-disable flags are set. Persisting user-provided text (stories, images prompts) is expected, but you should note that generated or user-entered content will be stored on disk.
Scan Findings in Context
[unicode-control-chars] unexpected: Scanner found unicode control characters in SKILL.md. Control characters can be used to obfuscate or craft prompt-injection sequences for LLMs. This is not required for a game specification; review the raw SKILL.md for hidden characters or maliciously injected directives before trusting it with sensitive inputs.
Assessment
What to consider before installing/using this skill:
- Coherence: The skill appears internally consistent for a text-based game: it reads local rules/templates and writes saves/stories and images. No external credentials or network downloads are requested.
- Prompt-injection signal: The SKILL.md contained unicode control characters flagged by the scanner. Open the SKILL.md in a raw text editor (show invisible characters) and check for unexpected invisible characters or instructions. If you can't verify, avoid entering sensitive secrets into the skill.
- Persistence: The skill will write generated novels, saves, and image files under stories/ and saves/. Don't store secrets or private data in game inputs you don't want persisted.
- Image generation: Images are produced via the ImageGeneration tool using included prompts; confirm your platform's image tool usage/quotas and that generated images are stored where you expect.
- Source and trust: The skill's source/homepage are unknown. If you require higher assurance, ask the publisher for a homepage, review a raw SKILL.md for hidden characters, or run the skill in a sandboxed environment.
- If you see unexpected behavior (e.g., prompts that ask for API keys, requests to read files outside the game directories, or attempts to post data to external endpoints), revoke access and remove the skill.Like a lobster shell, security has layers — review code before you run it.
gamevk975snffbe71mxk57xbgmfe1kd83qajkinteractivevk975snffbe71mxk57xbgmfe1kd83qajklatestvk975snffbe71mxk57xbgmfe1kd83qajklife-simulationvk975snffbe71mxk57xbgmfe1kd83qajkrpgvk975snffbe71mxk57xbgmfe1kd83qajkstoryvk975snffbe71mxk57xbgmfe1kd83qajk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.