Kuuila互动游戏框架
v3.1.0通用互动游戏框架，支持单人文字冒险、猜谜及多人武侠游戏，含私聊控制群游戏和实时状态同步。
⭐ 0· 269·1 current·1 all-time
by@kukuxnd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (interactive game framework with endless mode, card/combat/story systems) aligns with the provided source files (many JS modules implementing card system, combat, bosses, multiplayer, persistence, saves). No environment variables, binaries, or unrelated cloud credentials are requested.
Instruction Scope
SKILL.md focuses on game mechanics, commands, and endless-mode scheduling/persistence. It includes examples of cron-like scheduled tasks and world_state persistence (world_state.json) and admin commands for managing the world. Nothing in SKILL.md instructs the agent to read unrelated system files, access secrets, or transmit data to external endpoints. Note: SKILL.md and PUBLISH-GUIDE mention publishing via a CLI that uses browser auth — that is a publishing workflow, not runtime behavior, but it involves interactive login if the author publishes.
Install Mechanism
There is no install spec (instruction-only), which reduces install-time risk. However the package contains many source files and saves/JSON files — the absence of an install spec is not malicious but is a minor inconsistency to be aware of (the runtime will load these files when the skill is executed by the agent platform). No download-from-URL or external installer was specified.
Credentials
The skill declares no required environment variables, no primary credential, and no special config paths. The code snippets shown operate on in-repo data structures and local JSON saves only, so requested privileges are proportionate to the described functionality.
Persistence & Privilege
always is false and model invocation is enabled (default). The skill includes its own save files (saves/*.json) and describes persisting world_state, which is appropriate for an endless-mode game. It does not request system-wide configuration changes or modify other skills.
Assessment
This skill appears to be what it claims: a game framework with persistent 'endless mode' implemented in included JS files. Before installing or enabling autonomous use, you may want to: 1) review the omitted source files for any network, child_process, or filesystem operations that access paths outside the skill directory (search for require('child_process'), http/https/net/socket usage, or fs.readFile on system paths); 2) confirm you are comfortable with the skill writing/reading its saves/ world_state JSON in the skill directory; 3) test the skill in a sandboxed environment if you plan to let it run autonomously; and 4) note minor metadata inconsistencies (version numbers in _meta.json / SKILL.md / package.json) which look like bookkeeping mismatches rather than a security issue. If you want, I can scan the remaining omitted files for network or process-spawning APIs and call sites to raise any further flags.Like a lobster shell, security has layers — review code before you run it.
adventurevk979xa81cwj3kmfc9wxb7tfpyn838h83gamevk979xa81cwj3kmfc9wxb7tfpyn838h83interactivevk979xa81cwj3kmfc9wxb7tfpyn838h83latestvk9770v3s6rt1j596s0gekw113183ayj4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.