Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
TTRPG Game Master
v2.1.0TTRPG Game Master for mature dark-themed campaigns. Use for Cyberpunk, Dark Fantasy, Horror, character-driven narratives with consequence tracking. Features dual-consequence system (World + Relationships), autonomous NPCs, hidden D20 rolls, psychological gauges. Optional adult content module.
⭐ 0· 1.6k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (mature, dark TTRPG GM) align with the code and large SKILL.md: NPC systems, consequence tracking, hidden rolls, adult-content module and persistence are all expected capabilities. Minor mismatch: registry metadata declares no required config paths, yet the README/SKILL.md specify persistent campaign files under XDG_DATA_HOME/$HOME (e.g., ~/.ttrpg-campaigns). This is plausible for a GM skill but worth noting because the skill will read/write files in the user's home directory.
Instruction Scope
SKILL.md is the runtime instruction set and stays on-topic (narrative rules, saving/loading campaign files, adult-mode toggles, hidden-roll behavior). It does instruct the agent to read/write campaign files and to load reference files on demand. It does not direct network exfiltration or access to unrelated system credentials. Important content note: the adult-content module explicitly permits explicit and non-consensual sexual material (with some hard limits), which is a content/safety concern but not a technical incoherence.
Install Mechanism
No install spec (instruction-only) and only one small helper script (scripts/package.py) that packages files into a tar.gz. No downloads, no external installers, and no unusual binary requirements — low installation risk.
Credentials
The skill requests no environment variables, credentials, or binaries — appropriate for its purpose. However, it expects to persist/load campaign state from a user directory (XDG_DATA_HOME or $HOME fallback) even though 'required config paths' is empty in metadata. This is proportionate to a GM skill but you should expect local file read/write and ensure you are comfortable with that storage location and format.
Persistence & Privilege
The skill is user-invocable and not always-enabled (always:false). It persists campaign state to disk and updates campaign files (auto-saves, mode toggles). It does not request elevated privileges or modify other skills' configs. Autonomous invocation is permitted by default (disable-model-invocation:false), which is normal — combine that with persistence only if you want the skill to act without prompts.
Assessment
This skill appears to be what it claims: a feature-rich GM engine that saves campaign state to your filesystem and includes an explicit adult-content module. Before installing: 1) Review and confirm you are comfortable with the adult-content rules (it permits explicit and non-consensual scenes as narrative options) and ensure it meets your personal and local legal/safety standards. 2) Expect the skill to create/read/write campaign files under ${XDG_DATA_HOME:-$HOME/.local/share}/ttrpg-campaigns or ~/.ttrpg-campaigns — back up any important data and consider putting that folder in a sandbox if you want separation. 3) Verify the GitHub repository/author if provenance matters; the package script is simple and safe but review changes before trusting auto-installed skill files. 4) Test in a disposable campaign first (use test-prompts.md) to confirm save/load behavior and adult-mode toggles behave as you expect. If you need stricter content controls, don't enable adult mode or enforce Lines & Veils before gameplay.Like a lobster shell, security has layers — review code before you run it.
latestvk97cvt49dsskhrh227p8v9kq4h80jsy9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎲 Clawdis
OSmacOS · Linux · Windows