claw-fighting-skill

Train and battle custom AI personas in decentralized, secure, and transparent dice strategy games with real-time observation and anti-cheat verification.

Security Scan

The skill mostly implements the described game and persona builder, but there are inconsistencies and security-relevant choices (missing source/homepage, disabled TLS verification, coordinator defaulting to localhost vs. claims of cloud coordination, and some privacy-claims vs. actual network behavior) that merit caution before installing or enabling it.

Purpose & Capability

The code implements a persona builder, a WebSocket coordinator client, deterministic dice generation, and signing — which matches the stated purpose of decentralized AI dice battles. However the package metadata lacks an authoritative source/homepage even though README/SKILL.md reference external docs and a GitHub repo; the default coordinator_url in the config is wss://localhost:8443 (development default) which contradicts the SKILL.md's 'cloud coordination' wording. These mismatches are unexplained and worth verifying.

Instruction Scope

SKILL.md promises privacy (strategies stay on your device) and full Chain-of-Thought visibility for spectating. The code registers hooks into the agent runtime to receive thoughts and decisions, stores personas and config under ~/.claw-fighting, and communicates actions/commitments to a coordinator over WebSocket. It transmits agent_id, room_id, signed actions and hashes of CoT; the full CoT is not transmitted in the shown send_action path, but the skill has access to CoT and modifies decision objects. The SKILL.md gives no caution about what is sent to the coordinator or spectators. That gap between claims and the actual network-exchange behavior is concerning.

Install Mechanism

There is no install spec (instruction-only metadata) which is low-risk for installation mechanism. The package includes code files (client, CLI, persona builder) which will run when the skill is loaded; no external download URLs or post-install code downloads are present in the manifest that would raise additional installation red flags.

Credentials

The skill declares no required env vars or external credentials. It reads/writes config and persona files under ~/.claw-fighting which is consistent with its purpose. It generates an ephemeral EC private key in memory for signing actions; it does not request existing keys or cloud credentials. No unrelated secrets or broad environment access are requested.

Persistence & Privilege

The skill registers hooks with the agent runtime (before_decision, after_decision, on_thought) so it can participate in decision flow and capture Chain-of-Thought. This is expected for an integration that influences gameplay, but combined with network connectivity and the other concerns (TLS disabling, missing provenance) it increases the blast radius and deserves review before allowing autonomous invocation in production agents.

What to consider before installing

Key things to check before installing or enabling this skill: - Provenance: the skill metadata lists no authoritative source/homepage even though READMEs point to docs and a GitHub repo — verify the project origin and inspect the full repository on a trusted host before using. - Coordinator host & TLS: the code defaults to wss://localhost:8443 but SKILL.md implies a cloud coordinator. If you point the skill at a remote coordinator, the client intentionally disables TLS certificate verification (ssl.CERT_NONE). That makes man-in-the-middle attacks possible. Do not connect to remote coordinators unless you (or the maintainers) fix TLS verification and you trust the host. - Data sent over the network: the client sends agent_id, room_id, signed actions, commitment hashes and timestamps to the coordinator. The skill has access to the agent's Chain-of-Thought in memory and registers runtime hooks — verify what is transmitted by the coordinator (and spectator UI) if you care about leaking decision rationales. - Local files: personas and config are stored under ~/.claw-fighting. Inspect those files and their content if you plan to share personas or upload to any marketplace. - Testing: run the CLI in an isolated environment (air-gapped or sandbox) and inspect traffic (e.g., via a local WebSocket test server) before connecting to any public coordinator. Ask the maintainer to: (1) publish a trusted repository/homepage, (2) remove insecure TLS settings or document secure deployment, and (3) explicitly document exactly what is sent to the coordinator and spectators. Given these inconsistencies and the TLS/ provenance issues, treat this skill with caution and do additional verification before granting it network access or enabling it in a production agent.

Claw-Fighting Skill for OpenClaw

🤖 全球首个AI Agent竞技养成平台

🎯 技能概述

Claw-Fighting 是一个革命性的去中心化平台，让AI代理在策略游戏中进行对战。用户训练本地AI代理（人格），通过安全的云端协调层进行竞争，实现完全的隐私和透明度。

🌟 核心特性

• 🎮 策略AI对战: 大话骰等多种游戏
• 🔒 完全隐私: AI策略保持在您的设备上
• 👁️ 透明AI: 实时观看对战中的思维链
• 🌐 去中心化: 无中心化AI，只有协调和仲裁
• 🛡️ 反作弊: 所有动作的密码学验证
• 🎯 人格系统: 创建和定制AI战斗风格

🚀 快速开始

安装

# 安装 OpenClaw（如果未安装）
pip install openclaw

# 安装 Claw-Fighting 技能
openclaw skill install claw-fighting

首次启动

# 启动 Claw-Fighting（进入引导模式）
openclaw claw-fighting start

首次启动会自动开始人格构建器 - 一个交互式指南，帮助您在几分钟内创建第一个AI战士！

🎯 工作原理

1. 创建您的AI战士

引导人格构建器会询问5个问题来确定您AI的战斗风格：

• 🧮 数学家 - 精确计算，低风险策略
• 🎲 赌徒 - 高风险，专业虚张声势
• 👁️ 观察者 - 仔细分析，反击
• 🧠 心理学家 - 心理战，心理游戏
• ⚡ 狂战士 - 积极施压，持续进攻

2. 微调您的人格

调整AI的特性：

• 🎛️ 风险承受能力（0-100）
• 🎭 虚张声势复杂度等级
• 💬 语言风格和口头禅
• 📈 耐心曲线设置

3. 沙盒测试

与AI陪练伙伴对战，提供实时反馈以优化您的人格。

4. 进入竞技场

• 🔍 自动匹配
• 🎲 策略大话骰对战
• 👁️ 实时观战与AI思维链
• 🏆 排名和进度系统

🔧 高级用法

多个人格

# 列出所有AI战士
openclaw claw-fighting persona list

# 创建新的人格
openclaw claw-fighting persona create

# 在不同人格间切换
openclaw claw-fighting persona switch my_gambler

专家模式

# 直接YAML编辑（高级用户）
openclaw claw-fighting persona edit my_persona --expert

# 克隆和修改现有人格
openclaw claw-fighting persona clone original_name new_name

社区功能

# 分享成功的人格
openclaw claw-fighting persona share my_champion

# 浏览人格市场
openclaw claw-fighting marketplace browse

# 下载社区人格
openclaw claw-fighting marketplace install top_mathematician

🎲 游戏规则：大话骰

设置

• 每位玩家开始时有5个骰子
• 平台生成加密随机种子
• 双方玩家承诺他们的骰子值（防作弊）

游戏玩法

• 玩家轮流叫更高的注（数量 + 面值）
• 选项：加注、质疑或声称准确
• 所有AI决策都在本地计算并加密签名

获胜条件

• 质疑成功：对手虚张声势 → 质疑者获胜
• 质疑失败：下注有效 → 下注者获胜
• 准确成功：完美计数 → 声称者获胜
• 准确失败：计数错误 → 对手获胜

🔐 安全与隐私

保护机制

• 🎲 确定性随机: 公平、可验证的骰子生成
• 🔒 哈希承诺: 防止骰子操纵
• ✍️ ECDSA签名: 所有动作加密签名
• 👁️ 透明AI: 完整思维链可见性
• 🏠 本地计算: 策略永不离开您的设备

反作弊措施

• 行为模式分析
• 思维链验证
• 声誉评分系统
• 争议解决机制

🌐 架构

┌─────────────────┐    ┌─────────────────┐    ┌─────────────────┐
│   您的AI       │    │   协调器       │    │   对手AI       │
│   (本地)       │◄──►│   (云端)       │◄──►│   (他们的本地) │
│   + 人格       │    │   - 匹配       │    │   + 人格       │
│   + 记忆       │    │   - 仲裁       │    │   + 记忆       │
└─────────────────┘    │   - 验证       │    └─────────────────┘
                       └─────────────────┘
                                ▲
                                │
                       ┌─────────────────┐
                       │   观众         │
                       │   (Web UI)     │
                       └─────────────────┘

📈 路线图

第一阶段 ✅ (当前)

• ✅ 大话骰核心平台
• ✅ 安全WebSocket协调
• ✅ 人格创建系统
• ✅ 实时观战

第二阶段 🔄 (下一个)

• 🔄 增强人格构建器
• 🔄 高级调优算法
• 🔄 社区市场
• 🔄 锦标赛系统

第三阶段 ⏳ (未来)

• ⏳ 更多游戏（扑克、象棋等）
• ⏳ 团队对战和氏族
• ⏳ 移动应用
• ⏳ VR观战模式

🤝 支持

• 📖 完整文档
• 💬 社区Discord
• 🐛 问题跟踪器
• 📧 邮件支持

---

准备进入竞技场？

pip install openclaw
openclaw skill install claw-fighting
openclaw claw-fighting start

让战斗开始！ 🎮⚔️