Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gamebox

v1.0.1

多人游戏引擎框架 — 5 款游戏共用一套回合/状态/消息系统。 支持文字冒险、狼人杀、小说接龙、夺旗战、文明模拟。 LLM 负责叙事和动态内容生成,脚本负责状态管理和规则执行。 纯 Python 标准库,零外部依赖,跨 Windows/macOS/Linux。 通信基于共享目录,多 Agent 可同时参与。

0· 19·0 current·0 all-time
by波动几何@wangjiaocheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (multiplayer game engine using a shared directory) matches the actual files and behavior: scripts manage games, turns, messages, actions and implement five game types. No unrelated binaries or credentials are requested.
Instruction Scope
SKILL.md instructs CLI usage and a shared directory (.gamebox) and the scripts follow that protocol. The runtime instructions and code operate on local JSON files and logs only; they do not read unrelated system configuration or attempt to transmit data externally.
Install Mechanism
There is no install spec (instruction-only in registry), but the package includes Python scripts. The code uses only the Python standard library. Note: since code files are included, the agent (or user) will run these local scripts — there is no automatic installer or external download.
Credentials
The skill requires no environment variables, credentials, or config paths. All operations use a configurable local game_dir (default .gamebox). No secret-like env names are present.
Persistence & Privilege
always:false and the skill does not request permanent platform privileges. It writes and modifies files only under the configured game_dir and may remove a game directory when the last player leaves (shutil.rmtree on that game folder) — behaviour consistent with its purpose.
Assessment
This skill appears coherent and local-only, but review and run with caution: it will create and modify files under a game directory (default .gamebox) and can delete a game's folder when the last player leaves. Recommended precautions: (1) inspect the remaining omitted files before use, (2) run the scripts in an isolated directory (set game_dir to a dedicated sandbox) and with a non-privileged account, (3) don't point game_dir at system or sensitive locations, and (4) if you need stronger assurance, run the code in a disposable VM/container. No network access or credentials are requested by the provided files.

Like a lobster shell, security has layers — review code before you run it.

latestvk971fkr9wnh827dwjxbda6xgf184r69y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments