Daily Roleplay Game

PassAudited by ClawScan on May 10, 2026.

Overview

This is a disclosed adult roleplay game skill that creates a scoped OpenClaw workspace/agent and stores or sends roleplay content after user setup; no artifact-backed malicious behavior was found.

Install only if you want an explicit adult roleplay system. Before enabling it, review the setup script, keep the workspace private, configure only trusted/private message channels and image tools, and remember to remove scheduled tasks or archives if you no longer want the game to run or retain history.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the setup script can create files and an agent in your OpenClaw environment.

Why it was flagged

The skill explicitly asks the user to execute a local shell setup script that modifies the OpenClaw workspace and creates an agent. This is expected for deployment, but it is still local code execution.

Skill content
安装后运行部署脚本 ... `./skills/daily-roleplay-game/scripts/setup.sh` ... 脚本会自动:1. 创建 `role-play` agent ... 2. 部署引擎文件 ... 到 `~/.openclaw/workspace-role-play/`
Recommendation

Review the setup script before running it, and run it only from a trusted copy of the skill.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

The roleplay system may keep generating, archiving, or sending daily content after setup if scheduled tasks are configured.

Why it was flagged

The skill discloses creating a separate agent and scheduled daily initialization/wrap-up behavior. This is purpose-aligned, but it can continue operating until the user disables the schedule.

Skill content
创建 `role-play` agent ... 定时任务 — 添加 6:00 初始化 + 23:30 收尾归档 ... 6:00 — 自动初始化 ... 23:30 — 自动收尾(wrapup.sh)
Recommendation

Only configure the cron/scheduled tasks if you want ongoing daily automation, and remove those schedules to stop the game.

What this means

Your personal roleplay preferences, explicit game history, and generated content may remain on disk and influence future sessions.

Why it was flagged

The game stores user-provided personal details, roleplay state, guess history, achievements, and archives for reuse across sessions.

Skill content
`USER.md` — 填写你的个人信息 ... `MEMORY.md` — 配置消息频道 ... `roleplay-active.md` ... `guess-log.md` ... `archive/` ... `history_tracker.json`
Recommendation

Avoid entering sensitive real-world personal information, keep the workspace private, and periodically review or delete archives/history files.

What this means

Generated roleplay messages or images could be delivered to a chat channel or image provider you configure.

Why it was flagged

The skill can send messages/images through configured channels and use external or local image-generation backends. This is disclosed and user-configured, but it crosses privacy boundaries.

Skill content
`MEMORY.md` — 配置消息频道(discord/telegram/feishu/last) ... `TOOLS.md` — 配置生图工具(ComfyUI/SD WebUI/Midjourney/Nano Banana Pro ...) ... 发送早安消息 + 生图自拍
Recommendation

Use private channels and trusted image backends, and confirm where content will be sent before enabling messaging or image generation.