Identity Guess Game
v1.0.0身份猜猜猜 - 多人互动推理游戏。每位玩家被分配一个秘密身份，通过3轮线索描述暗示自己的身份，最终猜测其他玩家的身份。触发关键词：身份猜猜猜、猜身份、猜猜我是谁、identity guess、猜猜猜
⭐ 0· 175·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (multiplayer identity-guessing game) matches the included script and data files. The script implements creating games, assigning secret identities, accepting clues/guesses, scoring, and persisting history — all expected for the stated purpose. No unrelated credentials, binaries, or external services are requested.
Instruction Scope
SKILL.md instructs the agent to query session members and send private messages (DM) with each player's secret identity and to silently execute the engine commands. That is appropriate for the game but requires the platform/agent to have permission to list members and send DMs. The instructions also emphasize not exposing identities or technical details in group chat — this is a behavioural rule, not a technical enforcement, so accidental leaks remain a user/implementation risk.
Install Mechanism
No install spec; the skill includes a node ES module script and local JSON data under scripts/data/. There are no remote downloads, package installs, or unusual install actions. The package.json only declares node engine >=18.
Credentials
The skill requests no environment variables, no credentials, and accesses only local files within its scripts/data directory. This is proportionate for a local game engine that persists state to disk.
Persistence & Privilege
The script persistently writes game and ranking JSON files under scripts/data/. always is false and the skill does not request platform-level persistent privileges. Persisting identities and game state locally is necessary for the game, but you should be aware secret identities are stored on disk in this directory until settle reveals them.
Assessment
This skill appears coherent with its stated purpose: it assigns secret identities, sends each player their identity via private message, collects clues and guesses, and stores game/ranking state as local JSON files. Before installing: (1) confirm you trust the unknown source because the skill will send private messages containing secret identities (it needs platform permission to read member lists and DM users); (2) be aware identities and game state are stored on disk under scripts/data/ (inspect or secure that directory if needed); (3) ensure the hosting platform supports DMs and that the agent has explicit permission to list members/send DMs — otherwise private delivery may fail; (4) test in a small, consenting group first to confirm the agent correctly keeps secrets out of group chat; (5) if you require higher assurance, review the rest of the engine code (the settle implementation was truncated in the provided snippet) to verify exactly when and how identities are revealed and persisted.Like a lobster shell, security has layers — review code before you run it.
latestvk97dyz6gwyz9gzpfswsk963nxh83ypvr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.