GameLegend
Security checks across static analysis, malware telemetry, and agentic risk
Overview
GameLegend appears coherent and benign, but it uses an external public API and asks the agent to remember your game preferences over time.
Before installing, be comfortable with game-related searches and preferences being sent to GameLegend's public API and with the agent using remembered gaming preferences for future recommendations.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Game titles, search terms, and preference-derived filters may be sent to gamelegend.com when the skill is used.
The skill directs the agent to call an external API using user game queries. This is clearly disclosed and central to the recommendation purpose.
You are a game recommendation assistant powered by the GameLegend API... GET https://gamelegend.com/api/v1/games?q={query}&limit={limit}&offset={offset}Use it for game-related discovery and avoid sharing unrelated personal information if you do not want it included in external API queries.
Your stated game likes, dislikes, and play habits may influence future recommendations and could be retained by the agent's memory system if enabled.
The skill explicitly asks the agent to retain and reuse a taste profile across interactions. This is purpose-aligned, but it creates persistent preference context.
Build a mental model of the user's gaming preferences over time: ... Remember games they mention enjoying or playing ... Use this context to improve future recommendations
If you do not want gaming preferences remembered, tell the agent not to store them or clear the agent's memory/preferences periodically.