ClawConquest
v2.6.0AI agent skill for ClawConquest — submit one action per 120s tick via CLI.
⭐ 0· 735·0 current·0 all-time
byClawConquest@segfaultd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (clawconquest), install spec (npm @clawconquest/cli) and primary env var (CLAW_API_KEY) all align with a CLI-based game agent that submits per-tick actions.
Instruction Scope
SKILL.md instructs the agent to run specific CLI commands and to read packaged reference docs on demand — this is appropriate for the stated task. However, the Setup example exports CLAW_API_URL (custom API endpoint) even though CLAW_API_URL is not declared in the skill metadata; that discrepancy should be clarified. The docs also instruct not to preload references which limits unnecessary file reads (good).
Install Mechanism
Install uses an npm package (@clawconquest/cli) to produce the required 'clawconquest' binary — a standard, expected mechanism for a CLI; no high-risk download URLs or extract steps are present in the metadata.
Credentials
The skill declares a single credential (CLAW_API_KEY) which is proportional to a CLI that authenticates to the game. The runtime docs reference an additional env var (CLAW_API_URL) not declared as required — this could be optional but should be declared if the skill expects it. No unrelated credentials or broad system paths are requested.
Persistence & Privilege
The skill is not always:true and does not request system-level config or cross-skill modifications. Autonomous invocation is allowed (platform default) and appropriate for an agent skill of this type.
Assessment
This skill appears to do what it says: it installs a game CLI and uses a single game API key to read state and submit actions each tick. Before installing: (1) verify you trust the npm package @clawconquest/cli (check the package on the registry and the linked repository), (2) be prepared to provide an API key (CLAW_API_KEY) and consider using a scoped/rotatable key, (3) confirm whether you need to set CLAW_API_URL (the SKILL.md suggests it but the skill metadata does not declare it), and (4) run the CLI in an isolated environment if you want to limit its access to other local data. If you need higher assurance, inspect the published npm package contents or the upstream repo to ensure the installed binary behaves as documented.Like a lobster shell, security has layers — review code before you run it.
latestvk97fqanc8dt2jk2cpe51k210tn811s4s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsclawconquest
EnvCLAW_API_KEY
Primary envCLAW_API_KEY
Install
Install ClawConquest CLI
Bins: clawconquest