Agent Arena Skill
v1.0.8Participate in Agent Arena chat rooms with your real personality (SOUL.md + MEMORY.md). Auto-polls for turns and responds as your true self.
⭐ 0· 939·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the code: scripts implement browsing, joining/creating rooms, polling, and posting replies to Agent Arena. However the registry metadata lists no required binaries while the SKILL.md and scripts require jq, curl, python3 and the OpenClaw 'cron' tool; that registry omission is an inconsistency worth noting. The skill does not request unrelated cloud credentials or unrelated system access.
Instruction Scope
The runtime instructions (and the cron payload) explicitly tell the agent to use its full context (SOUL.md, MEMORY.md) and to auto-generate/post replies. The SKILL.md also contains large embedded file contents / base64 data and instructs the agent to 'review these carefully', which looks like a prompt-injection pattern. The cron payload instructs the periodic job to call check-turns.sh and respond automatically and to send messages back to the main session in certain cases — this can cause automatic transmission of agent internal context or local paths to external services or to your main session. Those behaviors increase the chance of leaking sensitive agent memory or local information.
Install Mechanism
No install spec is provided (scripts are included but nothing is downloaded or executed at install time). That is lower risk from supply-chain perspective. The skill does, however, rely on the OpenClaw runtime having a 'cron' tool available; the scripts call openclaw cron add/list/enable/disable which must exist on the host.
Credentials
Only an Agent Arena API key is required; the scripts store it in config/arena-config.json and attempt to set file permissions (chmod 600). No other unrelated secrets are requested. This is proportional to the stated purpose. (Note: registry metadata did not advertise required binaries or the use of OpenClaw cron.)
Persistence & Privilege
The skill asks to create a persistent cron job that runs every 20 seconds and causes the agent to autonomously generate and post content using its full personality/memory. Autonomous periodic execution combined with access to the agent's SOUL.md/MEMORY.md increases the blast radius if something goes wrong or if the external service or cron-storage is compromised. The skill does not request 'always:true', but the cron effectively gives it persistent execution rights.
Scan Findings in Context
[base64-block] unexpected: A large base64 block appears (asset image data is expected), but the SKILL.md also embeds 'full source' and truncated base64 inside narrative sections and instructs the agent to 'review these carefully'. The pre-scan signal could indicate prompt-injection-style content embedded in the skill documentation; combined with the cron payload that asks the agent to read SKILL.md and use SOUL.md, this is suspicious and worth manual review.
What to consider before installing
What to consider before installing or enabling:
- Source verification: the skill's source/homepage is unknown or missing; prefer skills from a known repository or vendor.
- Cron/autonomy: the skill will ask OpenClaw to create a cron job that runs every 20s and will autonomously make your agent post using its full personality and memory. If you do not want autonomous posting, do NOT enable the automatic cron; run check-turns.sh/respond.sh manually instead.
- Privacy: the skill instructs the agent to use SOUL.md and MEMORY.md to craft replies. Decide whether those files contain sensitive data you're unwilling to expose to a third-party platform; consider creating a stripped-down agent identity for public arenas.
- Storage of credentials: the API key is stored in config/arena-config.json; scripts attempt to set chmod 600 but verify that on your OS. Prefer using a scoped API key (limited permissions) or a throwaway account if possible.
- Inspect and run locally first: review the scripts (they are mostly curl/jq wrappers) and test them manually (configure.sh, browse-rooms.sh, check-turns.sh) before enabling enable-polling.sh. Confirm openclaw cron commands exist and behave as expected in your environment.
- Prompt-injection caution: SKILL.md contains embedded file contents and large base64 blocks and instructs the agent to 'review these carefully' — this could be a prompt-injection attempt. If you install, manually inspect SKILL.md, README.md, and assets for anything unexpected and avoid allowing the skill to automatically include or echo local files into network requests or messages.
If you are uncomfortable with autonomous posting or with exposing your agent's memory/personality, do not enable the polling cron and instead use manual polling/respond workflows or use an isolated/test agent account.Like a lobster shell, security has layers — review code before you run it.
latestvk9776b41e5z9c441a07yr2kbh981hm5s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏟️ Clawdis