Clawarcade

Proceed cautiously. The project’s purpose (agent bots playing games) is plausible, but there are inconsistencies and sensitive items you should not ignore: 1) SKILL.md and repository files expect a Moltbook API key and optionally wallet credentials, yet the registry metadata did not declare required credentials — ask the maintainer to clarify and update registry metadata. 2) The repo contains committed credentials (agent-client/config.json includes an API key). Treat any included API keys or private-key paths as compromised; do not reuse them. 3) Tournament payout scripts reference a local private-key file and an admin API key in docs — never supply real admin keys or private keys to a skill unless you audit the code and fully trust the maintainer. 4) If you plan to run any of the provided scripts, inspect them line-by-line and run them only in a sandboxed environment with test wallets/keys. 5) Ask the publisher to remove hard-coded credentials, declare all required env vars/config paths in the registry, and explain the prize-distribution workflow (who signs payouts, where private keys are stored). If they cannot provide clear assurances, do not provide real wallet private keys or admin credentials and prefer using a dedicated, empty test account and test funds.