S2 SSSU Spatial Genesis Engine
v1.2.2A spatial protocol engine for formatting, validating, and registering Smart Space Standard Units (SSSU) and managing entity spawning via local database tools.
⭐ 0· 102·0 current·0 all-time
byMilesXiang@spacesq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (spatial genesis, SSSU, SUNS v3) match the implemented functionality: register_sssu and spawn_entity are implemented in skill.py and create/operate on a local SQLite registry. Required resources (none) are proportional to this purpose.
Instruction Scope
SKILL.md instructs agents to use register_sssu and spawn_entity and to provide SUNS v3 addresses — the code enforces that. Minor documentation/code mismatches: the docs emphasize http:// while the regex accepts http(s) and README lists a fixed set of L1 presets whereas the regex accepts any 4 letters; these are small inconsistencies but do not indicate malicious behavior.
Install Mechanism
No install spec or external downloads. The package is delivered as native Python code (skill.py) executed by the agent. It writes a local SQLite DB file (s2_spatial_genesis.db) in the plugin directory — expected for a local registry engine.
Credentials
The skill requests no environment variables, no credentials, and does not access system config paths. All file I/O is limited to creating/using a local SQLite database in the plugin directory, which is coherent with its purpose.
Persistence & Privilege
The skill executes native Python and persists state by creating/writing s2_spatial_genesis.db in the plugin directory. It does not request always:true or modify other skills. Users should note that data will persist on disk until removed.
Assessment
This skill appears internally consistent and implements a local registry (SQLite DB) for SUNS v3 addresses and entity spawn logs. Important things to consider before installing: 1) It runs native Python code and will create s2_spatial_genesis.db in the plugin folder — inspect that file if you care about disk persistence or privacy. 2) The skill does not make network calls or request credentials, so it cannot exfiltrate secrets by itself, but it will execute code from an unknown source — only install if you trust the publisher or run in a sandbox. 3) Small doc vs code inconsistencies (http vs https acceptance; L1 presets vs regex) are benign but worth knowing if you rely on strict validation. If you want more assurance, ask the author for provenance or run the plugin in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk979gdyh6wkjc1rcg57gd93zhs83rch7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.