The Uninscribed

• Risk level: Low Risk
• Analyzed: Feb 18, 2026, 8:56 PM
• Findings: 0
• Version: 2.2.0

Overview

The skill’s code, instructions, and requested changes are coherent with a game client that runs a persistent player agent; nothing in the package is disproportionate or unrelated to that purpose, though you should explicitly confirm the gateway config changes and trust the external game server before proceeding.

This package is internally consistent for running a persistent game-playing agent, but review and confirm before applying its platform changes. Specifically: (1) The gateway config.patch will add a dedicated agent, enable agent-to-agent messaging, and change heartbeat behavior — only apply if you trust these changes and preserve your main agent's heartbeat as instructed. (2) The CLI communicates with https://theuninscribed.com and will save the returned apiKey to ~/.config/the-uninscribed/config.json; ensure you trust that server. (3) The player will read/write persistent files (session-log.md, HEARTBEAT.md) under your home directory. (4) Do not run the gateway config.patch without explicit user consent and, if possible, review the exact patch output that will be applied. If you are uncomfortable granting platform-level agent/heartbeat changes or allowing an external service API key to be stored locally, do not install or run the skill.