Arknights Operator Gacha

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherent for creating a game-themed OpenClaw agent, but it does run local commands, create a persistent agent/workspace, and use public wiki content as persistent character instructions.

Install this only if you are comfortable with it creating a new persistent OpenClaw agent under ~/.openclaw, fetching public Arknights wiki pages, downloading an avatar, and committing generated files. Review the generated SOUL.md and workspace after use.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill can add a new local OpenClaw agent and workspace without a separate interactive confirmation inside the worker.

Why it was flagged

The worker invokes the local OpenClaw CLI to create an agent and workspace. This is purpose-aligned for an agent-generation skill and uses argument lists rather than shell strings, but it is still a local mutation the user should notice.

Skill content
subprocess.run(["openclaw", "agents", "add", sanitized, "--workspace", str(workspace), "--non-interactive"], ... shell=False)
Recommendation

Use it only when you actually want a new persistent operator agent, and review or remove the generated workspace if the pull is not desired.

What this means

The skill may leave a new roleplay agent available for future use in the user’s OpenClaw environment.

Why it was flagged

The workflow creates a persistent agent, writes identity/personality files, and spawns that agent for a roleplay greeting. This fits the stated purpose, but it leaves behind a durable agent artifact.

Skill content
Create agent via `openclaw agents add` ... Write to: `[workspace]/SOUL.md` ... sessions_spawn(... agentId="{operator-name}", mode="run")
Recommendation

After use, confirm the generated agent and workspace are what you wanted, and delete them if you do not want persistent access to that character agent.

What this means

Public wiki content may become part of the generated agent’s long-term personality and behavior guidance.

Why it was flagged

The skill turns external wiki content into a persistent SOUL.md file used to shape the generated agent’s future behavior. The sources are public lore pages and this is purpose-aligned, but retrieved web content can influence persistent instructions.

Skill content
Fetch lore from URLs provided by worker ... Generate comprehensive SOUL.md ... Write to: `[workspace]/SOUL.md`
Recommendation

Review the generated SOUL.md if you care about accuracy, tone, or whether any unwanted web content was incorporated.

What this means

The skill may fail or behave differently depending on local Python packages, git, and OpenClaw CLI availability.

Why it was flagged

The README documents runtime dependencies, while the registry section reports no required binaries and no install spec. This is an under-declaration/provenance clarity issue rather than evidence of hidden behavior.

Skill content
Requirements: Python 3.7+; requests library (`pip install requests`); openclaw CLI configured; git
Recommendation

Ensure the required local tools are installed and trusted before invoking the skill.