Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Brain Tease Game

v1.0.1

[中文] 多语言脑筋急转弯互动游戏,支持中文、英文、日文。自动检测用户语言,支持随机出题、答案判断、提示系统、不重复题目历史记录。 [English] Multi-language brain teaser interactive game supporting Chinese, English, and Jap...

0· 193·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kickegg/brain-teaser-game.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Brain Tease Game" (kickegg/brain-teaser-game) from ClawHub.
Skill page: https://clawhub.ai/kickegg/brain-teaser-game
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install brain-teaser-game

ClawHub CLI

Package manager switcher

npx clawhub@latest install brain-teaser-game
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (multi-language brain teasers) matches the code: local question files, session/history management, fuzzy answer matching, and an optional AI generator. The only surprise is the AI generator's attempt to reuse existing LLM credentials from ~/.claude/settings.json and ~/.openclaw/openclaw.json — this is related to optional AI features but not strictly necessary for the core offline game.
!
Instruction Scope
Runtime instructions and CLI commands are in-scope for the game. However the SKILL.md and the code declare that AI generation will look for credentials in environment variables and in local config files (~/.claude/settings.json and ~/.openclaw/openclaw.json). That means the skill will read files in your home directory that may contain unrelated secrets if AI generation is enabled (or if those files exist). The SKILL.md does document this lookup order, but reading other tool configs is a broader scope than a simple offline game.
Install Mechanism
No install spec (instruction-only entry + local Python scripts). Nothing is downloaded from external URLs and no archives are extracted, so installation writes only the provided files and uses standard Python execution — low install risk.
!
Credentials
The skill requires no mandatory env vars, but the optional AI feature will read BRAIN_TEASER_API_KEY and BRAIN_TEASER_API_BASE if set. It will also attempt to read ~/.claude/settings.json for ANTHROPIC_AUTH_TOKEN and ~/.openclaw/openclaw.json for gateway info. Accessing these other config files may expose existing LLM/Anthropic/OpenClaw credentials on the host; this is somewhat disproportionate for a basic offline quiz unless you explicitly want AI question generation.
Persistence & Privilege
The skill stores sessions and history under ~/.cache/brain-teaser and does not request permanent 'always' privilege or modify other skills. It does not change system-wide settings or other skills' configs. File writes are limited to its own cache directory.
What to consider before installing
What to consider before installing: - Core functionality: The game runs locally using bundled question JSON files and stores sessions/history at ~/.cache/brain-teaser — this behavior matches the description. - AI generation: An optional AI generator can call LLM APIs if configured. By default AI generation is disabled, but the skill will try to discover credentials in this order: BRAIN_TEASER_API_KEY (env), ~/.claude/settings.json (Anthropic token), and ~/.openclaw/openclaw.json (local gateway). If any of those exist, the skill may use those credentials to make network calls. If you do not want this, do not set BRAIN_TEASER_API_KEY and ensure ~/.claude/settings.json and ~/.openclaw/openclaw.json do not contain sensitive tokens on that machine. - Dependency note: README/SKILL.md claim "no external dependencies (standard library only)", but ai_generator attempts to import the openai client if available. AI generation will only work if such a library is installed, but this is an undocumented optional dependency — expect that enabling AI may require installing an external Python package. - Risk summary: The main risk is accidental use of existing LLM credentials (or reading unrelated config files) and then making network requests. If you plan to use only the offline game, either run it in an environment without the LLM credentials present or audit/remove the AI-related files/env vars. Otherwise the skill appears consistent with its stated purpose. Suggested actions: - If you want the offline game only: do not set BRAIN_TEASER_API_KEY and run in an environment without ~/.claude/settings.json or ~/.openclaw/openclaw.json containing tokens. - If you want AI generation: review ai_generator.py to confirm which files/vars it reads and what endpoints it will call; consider creating a dedicated API key with limited scope. - Optional: run the skill in a sandbox or inspect network traffic the first time you enable AI to confirm behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bc19kd2gq57y0gjvzgne699833jc8
193downloads
0stars
2versions
Updated 21h ago
v1.0.1
MIT-0

🧠 Brain Teaser / 脑筋急转弯 / なぞなぞ


🇨🇳 中文

多语言脑筋急转弯互动游戏,支持中文、英文、日文。

功能

  • 自动检测用户语言(中文/英文/日文)
  • 200+ 题目库(每种语言)
  • 智能答案匹配(模糊匹配)
  • 提示系统
  • 历史记录(不重复题目)

使用方法

开始游戏

./invoke.sh start "来个脑筋急转弯"

游戏中操作

操作命令
回答直接输入答案
提示输入"提示"
答案输入"答案"
下一题输入"下一题"

命令行接口

# 提交答案
./invoke.sh answer {session_id} "你的答案"

# 获取提示
./invoke.sh hint {session_id}

# 查看答案
./invoke.sh reveal {session_id}

# 下一题
./invoke.sh next {session_id}

# 交互模式(自动检测意图)
./invoke.sh interactive {session_id} "提示"
./invoke.sh interactive {session_id} "你的答案"

# 重置历史记录
./invoke.sh reset-history

输出格式

所有输出为 Markdown 格式,包含:

  • 当前题目
  • 提示(如请求)
  • 答案反馈
  • 游戏统计
  • 会话 ID

AI 题目生成(可选)

配置环境变量启用 AI 动态生成新题:

export BRAIN_TEASER_API_KEY=your-api-key
export BRAIN_TEASER_API_BASE=https://api.example.com/v1  # 可选
export BRAIN_TEASER_MODEL=gpt-4  # 可选

API 配置读取优先级:

  1. 环境变量 BRAIN_TEASER_API_KEY
  2. ~/.claude/settings.json
  3. ~/.openclaw/openclaw.json

🇺🇸 English

Multi-language brain teaser interactive game supporting Chinese, English, and Japanese.

Features

  • Auto-detect user language (Chinese/English/Japanese)
  • 200+ question pool per language
  • Smart answer matching (fuzzy matching)
  • Hint system
  • History tracking (no repeated questions)

Usage

Start Game

./invoke.sh start "Give me a brain teaser"

In-Game Operations

ActionCommand
AnswerType your answer directly
HintType "hint"
Reveal AnswerType "answer"
Next QuestionType "next"

Command Line Interface

# Submit answer
./invoke.sh answer {session_id} "your answer"

# Get hint
./invoke.sh hint {session_id}

# Reveal answer
./invoke.sh reveal {session_id}

# Next question
./invoke.sh next {session_id}

# Interactive mode (auto-detect intent)
./invoke.sh interactive {session_id} "hint"
./invoke.sh interactive {session_id} "your answer"

# Reset history
./invoke.sh reset-history

Output Format

All output is in Markdown format, including:

  • Current question
  • Hint (if requested)
  • Answer feedback
  • Game statistics
  • Session ID

AI Question Generation (Optional)

Configure environment variables to enable AI dynamic question generation:

export BRAIN_TEASER_API_KEY=your-api-key
export BRAIN_TEASER_API_BASE=https://api.example.com/v1  # optional
export BRAIN_TEASER_MODEL=gpt-4  # optional

API configuration priority:

  1. Environment variable BRAIN_TEASER_API_KEY
  2. ~/.claude/settings.json
  3. ~/.openclaw/openclaw.json

🇯🇵 日本語

中国語、英語、日本語に対応したなぞなぞインタラクティブゲーム。

機能

  • ユーザーの言語を自動検出(中国語/英語/日本語)
  • 各言語200問以上の問題
  • スマートな回答マッチング(曖昧検索対応)
  • ヒント機能
  • 履歴管理(重複なし)

使い方

ゲーム開始

./invoke.sh start "なぞなぞをください"

ゲーム中の操作

操作コマンド
回答答えを直接入力
ヒント「ヒント」と入力
答えを見る「答え」と入力
次の問題「次」と入力

コマンドラインインターフェース

# 回答を送信
./invoke.sh answer {session_id} "あなたの答え"

# ヒントを取得
./invoke.sh hint {session_id}

# 答えを表示
./invoke.sh reveal {session_id}

# 次の問題
./invoke.sh next {session_id}

# インタラクティブモード(意図を自動検出)
./invoke.sh interactive {session_id} "ヒント"
./invoke.sh interactive {session_id} "あなたの答え"

# 履歴をリセット
./invoke.sh reset-history

出力形式

すべての出力はMarkdown形式で、以下を含みます:

  • 現在の問題
  • ヒント(リクエスト時)
  • 回答フィードバック
  • ゲーム統計
  • セッションID

AI問題生成(オプション)

AI動的問題生成を有効にするには環境変数を設定:

export BRAIN_TEASER_API_KEY=your-api-key
export BRAIN_TEASER_API_BASE=https://api.example.com/v1  # オプション
export BRAIN_TEASER_MODEL=gpt-4  # オプション

API設定の優先順位:

  1. 環境変数 BRAIN_TEASER_API_KEY
  2. ~/.claude/settings.json
  3. ~/.openclaw/openclaw.json

📁 File Structure / 文件结构 / ファイル構成

brainTeaser/
├── SKILL.md           # This file / 本文件 / このファイル
├── invoke.sh          # Bash entry / Bash入口 / Bashエントリ
├── invoke.py          # Core implementation / 核心实现 / コア実装
├── language.py        # Language detection / 语言检测 / 言語検出
├── answer.py          # Answer matching / 答案判断 / 回答判定
├── session.py         # Session management / 会话管理 / セッション管理
├── ai_generator.py    # AI generation (optional) / AI生成(可选) / AI生成(オプション)
└── data/
    ├── zh.json        # Chinese questions / 中文题库 / 中国語問題
    ├── en.json        # English questions / 英文题库 / 英語問題
    └── ja.json        # Japanese questions / 日文题库 / 日本語問題

🔧 Dependencies / 依赖 / 依存関係

  • Python 3.6+
  • No external dependencies (standard library only) / 无外部依赖(标准库)/ 外部依存なし(標準ライブラリのみ)

Comments

Loading comments...