Ashen Era Play
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears to do what it says—run a local Ashen Era CLI game and write a report—but users should know it executes a packaged native binary whose release archives are not visible in the provided file manifest.
This looks like a narrowly scoped game-playing skill. Before installing, be aware that using it runs a native CLI executable from the skill package; because the referenced release archives are not included in the provided manifest and the source is unknown, only run it if you trust the publisher.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing and using the skill can run a local executable on the user's machine.
The helper extracts a platform-specific archive, marks the binary executable, and runs it. This is expected for a skill whose purpose is to launch a bundled CLI game, but it is still local native code execution.
tar -xzf "${ARCHIVE}" -C "${TARGET_DIR}"
chmod +x "${BINARY}"
...
exec "${BINARY}" "$@"Only use it if you trust the skill publisher and are comfortable running the packaged game binary.
The skill may fail if the archives are truly missing, or users may be asked to trust packaged binaries that were not visible in this review context.
SKILL.md says the skill bundles release archives under assets/releases, but those archives are not present in the provided manifest. That makes the executable payload unavailable for review in these artifacts.
5 file(s): SKILL.md; agents/openai.yaml; references/cli-surface.md; references/report-contract.md; scripts/run-packed-cli.sh
Verify the release archives and publisher provenance before running the skill, especially because the listed source is unknown and there is no homepage.