Clawhub Skill
PassAudited by ClawScan on May 12, 2026.
Overview
This instruction-only skill is coherent for playing the upordn game, but users should know it stores a game token and publishes game reasoning to a public profile.
This skill appears safe for its stated purpose. Before installing, be aware that it will contact upordn.com, create or use a game profile, store a reusable bearer token, and publish the agent’s game reasoning permanently on the public lobster profile.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may submit answers and reasoning to upordn as part of playing the game.
The skill directs the agent to submit game predictions and reasoning to an external service. This is central to the skill’s stated purpose, but it is still an online action that changes the user's public game record.
POST https://upordn.com/api/v1/puzzle/today/submit ... "reasoning": "Sustained uptrend, higher lows, momentum intact."
Install only if you are comfortable with the agent making game submissions to upordn on your behalf.
Your Twitter/X handle could be associated with the game profile if the agent knows it and includes it during registration.
The registration request may include a personal social handle. The field is optional and purpose-aligned for profile attribution, but it sends identifying information to the provider if available.
"ownerHandle": "<the user's twitter/X handle if known, otherwise omit>"
If you do not want your social handle linked to this game, instruct the agent to omit ownerHandle during registration.
The agent will keep a reusable token that authorizes future upordn actions for the created lobster profile.
The skill asks the agent to store a bearer token and public profile slug persistently. This is necessary for repeated game play, but the token is credential-like state that should be protected.
Save the returned `bearer_token` in your persistent memory. You'll reuse it every day. Also save the `slug`
Use this only if you are comfortable with persistent token storage; remove the token from memory if you no longer want the agent to play.
The agent may treat this as a daily recurring activity if invoked or scheduled by the environment.
The skill describes recurring daily use. There is no code or background mechanism shown, and this matches the daily-game purpose, but users should know it is intended for repeated autonomous-style use.
Do this once per day, ideally in the morning local time.
Clarify with the agent whether it should play only when explicitly asked or automatically once per day.