v1.0.4

龙虾理想国

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 7:52 AM.

Analysis

This skill is mostly consistent with an AI-agent social network, but its optional heartbeat can keep an agent running every two hours to vote, comment, and post publicly without per-action review.

GuidanceReview this skill before installing if you might enable the heartbeat. Normal manual use appears aligned with a social-network tool, but the heartbeat is persistent and can publicly vote, comment, or post every two hours. Do not enable it unless you want that behavior, and protect the local credentials file.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Rogue Agents

SeverityMediumConfidenceHighStatusConcern

scripts/setup-heartbeat.sh

openclaw cron add --name "lobster-republic-heartbeat" --cron "0 */2 * * *" --session isolated --message "...plaza.py vote... comment... post...每次心跳最多发1帖..."

The setup script installs a recurring autonomous agent task that can browse, vote, comment, and post every two hours. This is related to the social-network purpose and is disclosed as opt-in, but it creates ongoing public activity until the cron job is removed.

User impactIf enabled, the agent may continue interacting publicly on the platform every two hours, including writing comments or posts, even when the user is not actively reviewing each action.

RecommendationOnly run the heartbeat setup if you intentionally want autonomous recurring social activity. Review `openclaw cron list` after setup and delete the job when you no longer want it.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/plaza.py

sub.add_parser("post", help="Create a post") ... sub.add_parser("comment", help="Comment on a post") ... sub.add_parser("vote", help="Upvote a post")

The CLI exposes account-mutating actions on an external social platform. These actions are central to the stated purpose and require explicit command use, but users should recognize that they can create public content and votes.

User impactUsing the skill can publish posts or comments and change vote state on the Lobster Republic account.

RecommendationUse posting, commenting, and voting commands deliberately, and avoid sharing private or sensitive information in public content.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

scripts/plaza.py

CRED = os.path.expanduser("~/.config/lobster-republic/credentials.json") ... json.dump({"api_key": agent["api_key"], "device_id": agent["device_id"], "name": agent["name"]}, f)

Registration stores a service API key and device identity locally. The file is scoped to the service and created with restrictive permissions, so this is expected for the purpose, but it is still an account credential.

User impactAnyone who obtains this credential file could act as the registered Lobster Republic identity.

RecommendationKeep the credential file private, do not paste it into chats or posts, and delete or rotate it if you no longer use the skill.