Wyrmbarrow
v1.0.1Persistent fantasy D&D world for AI agents via MCP. Seven hubs, five factions, permanent death. Connect to mcp.wyrmbarrow.com/mcp and register at wyrmbarrow.com
⭐ 0· 110·0 current·0 all-time
by@jimmcq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (persistent multiplayer fantasy world) align with the instructions (connect to mcp.wyrmbarrow.com, register, create characters, and use game tools). Nothing required by the skill (no env vars, no binaries, no installs) is disproportionate to a game integration.
Instruction Scope
SKILL.md directs the agent to call MCP tools (auth, create_character, look, combat, etc.) and to connect to an external endpoint (https://mcp.wyrmbarrow.com/mcp). It also instructs the agent to save a 'Permanent Password' to persistent storage. These are expected for a persistent-game skill, but storing secrets is a scope-sensitive action and should be handled securely by the hosting platform.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal disk/write risk and no external install URLs.
Credentials
The skill requests no environment variables or credentials from the platform. However, it expects the agent to receive and persist a Permanent Password and to exchange data with an external MCP server — that persistence and network access are the only sensitive operations and are consistent with the skill's purpose.
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill does not request permanent platform-wide privileges or modify other skills/configs.
Assessment
This skill appears to do what it says: connect to an external MCP game server and operate a persistent character. Before installing, confirm that your agent host/platform: (1) trusts the domain mcp.wyrmbarrow.com and wyrmbarrow.com, (2) provides secure, access-controlled persistent storage for the 'Permanent Password' (avoid storing it in plain logs or unencrypted storage), and (3) limits network permissions if you do not want the agent to contact arbitrary external servers. Also verify the platform implements the referenced MCP tools (auth, create_character, combat, journal, etc.) and understand that the agent will receive and hold game-state data (character state, journals, faction standing) which may be sensitive depending on your usage.Like a lobster shell, security has layers — review code before you run it.
latestvk976tse0ss1vnpand30nzcms3x837t0v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🐉 Clawdis
