Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

The Arena — AI Debate Moderator

v1.3.0

Turn a Discord server into a moderated debate arena with an AI judge. Supports multiple debate formats, configurable personas, scored verdicts, and a persist...

0· 780·1 current·2 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tdavis009/the-arena.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "The Arena — AI Debate Moderator" (tdavis009/the-arena) from ClawHub.
Skill page: https://clawhub.ai/tdavis009/the-arena
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install tdavis009/the-arena

ClawHub CLI

Package manager switcher

npx clawhub@latest install the-arena
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (Discord debate moderator + scoreboard) align with everything in SKILL.md and the references. Required permissions (Discord bot token, gateway config changes) are expected for this functionality. No unrelated env vars, binaries, or external credentials are requested.
Instruction Scope
The instructions stay within the moderator/scoreboard domain (posting templates, enforcing formats, generating config.patch templates, initializing a local SQLite DB). A few items merit caution: (1) the agent generates gateway config patches that must be reviewed before applying — do not apply patches blindly because arrays like agents.list/bindings are replaced entirely; (2) the setup script can optionally post welcome messages automatically — confirm when/what it will post; (3) the SKILL.md asserts the provided scripts make no network calls and write only to the workspace, but that claim should be verified by inspecting the scripts before running.
Install Mechanism
No install spec (instruction-only) and only two bash scripts bundled. No external downloads or package installs are declared. This is lower risk, but bundled scripts should still be inspected before execution.
Credentials
No required environment variables or credentials are declared; a single optional DEBATE_SCOREBOARD_DB path is documented for a local SQLite DB. The skill does reference the gateway bot token and bot permissions, which are appropriate and expected for a Discord integration.
Persistence & Privilege
always:false and no autonomous elevation patterns are present. The skill recommends running as a separate, isolated agent with fs.workspaceOnly and exec disabled — this is the advised safe posture. The skill does generate config templates but does not claim to apply them automatically.
Assessment
This skill appears coherent for running an AI debate moderator on Discord, but take these precautions before installing: - Inspect the bundled scripts (scripts/setup.sh and scripts/scoreboard.sh) line-by-line. Verify they do not make network calls (curl, wget, git, nc, ssh) or write outside the skill workspace. The SKILL.md claims they do not, but you should confirm. - Do not apply any generated config.patch without manual review. The SKILL.md warns that agents.list and bindings arrays are replaced entirely; ensure the patch preserves existing agents/bindings and channel entries. - Run the skill in an isolated agent as recommended (fs.workspaceOnly, exec denied, limited tools). This limits blast radius if the skill or messages attempt injection. - Be careful with requireMention=false on the arena channel: it exposes all messages to the moderator (higher token usage and broader data exposure). If privacy/cost is a concern, set requireMention:true. - Verify the Discord bot already has only the minimum permissions you’re willing to grant (avoid granting Manage Roles unless necessary). - If you want stronger assurance, share the exact contents of the two scripts and any portions of SKILL.md you plan to automate; I can review them for network calls, credential access, or other red flags. If you review the scripts and confirm they’re workspace-only and network-free, this skill is internally consistent and reasonable to use under the recommended isolation model.

Like a lobster shell, security has layers — review code before you run it.

latestvk979y8tqwpnq70aesgt9cpw29h81fyes
780downloads
0stars
4versions
Updated 11h ago
v1.3.0
MIT-0

The Arena — AI Debate Moderator

Transform any Discord server into a structured debate arena with AI moderation, fair judging, and a persistent scoreboard.

Prerequisites

This skill requires the following. Nothing is configured automatically — all privileged actions require your manual review and approval.

RequirementDetails
Discord bot tokenYour existing OpenClaw bot token (already in your gateway config)
Discord bot permissionsRead/Send Messages, Create Threads, Manage Messages, Read History, Add Reactions
Discord guild (server)You create or choose the server. You provide the guild ID.
Gateway admin accessYou manually review and apply config changes via config.patch
DEBATE_SCOREBOARD_DB (optional)Env var to set SQLite DB path. Default: ./data/scoreboard.db (within skill workspace)

Security Notes

  • This skill recommends running as a separate, isolated OpenClaw agent with restricted tool access (fs.workspaceOnly: true, exec.security: "deny").
  • Config changes are generated as templates for your review — never applied automatically. You must manually review and apply all gateway config patches.
  • The included scripts (scripts/setup.sh, scripts/scoreboard.sh) only create files within the skill workspace. They make no network calls and write no files outside the skill directory. Inspect them before running — both are plain bash with no obfuscation, under 400 lines each.
  • The scoreboard SQLite DB is created at ./data/scoreboard.db relative to the skill directory (or at $DEBATE_SCOREBOARD_DB if set). It never writes outside the skill workspace.
  • Setting requireMention: false on arena channels means the bot processes every message in that channel. This increases token usage and data exposure. Use requireMention: true for lower cost and reduced visibility.

Quick Start

Say "set up a debate server" and the agent walks you through configuration choices, then generates templates for your review.


Onboarding Flow

Step 1 — Choose a Server

Create a new Discord server or pick an existing one. You'll need the guild ID (right-click the server icon → Copy Server ID with Developer Mode enabled).

Step 2 — Choose a Moderator Persona

Pick the voice your moderator uses during debates. Default: Scholar.

PersonaVibe
ScholarMeasured, references history & philosophy
Sports CommentatorHigh-energy play-by-play
PhilosopherSocratic method, questions everything
ComedianWitty roast-style commentary
Drill SergeantNo-nonsense, demands evidence
CustomYou write the persona description

Details in references/personas.md.

Step 3 — Choose a Default Format

The default format used when someone starts a debate without specifying one. Default: Campfire.

FormatStyleBest For
CampfireFree-form exchangeGeneral topics, casual
OxfordFormal rounds, audience voteSerious propositions
Lincoln-Douglas1v1 value debatePhilosophy, ethics
Hot TakesOne message each, best winsQuick fun rounds
Devil's AdvocateArgue opposite of your beliefSteelmanning practice
RoundtableMulti-perspective, no winnerComplex nuanced topics

Details in references/formats.md.

Step 4 — Judging Criteria Weights

Customize how the moderator scores arguments. Defaults:

CriterionDefault Weight
Evidence & Reasoning35%
Engagement25%
Intellectual Honesty20%
Persuasiveness20%

Weights must sum to 100%. Details in references/judging.md.

Step 5 — Configure Channels

Default channel names (all customizable):

ChannelPurpose
#rulesServer rules, format overview, commands
#propose-a-topicTopic proposals and voting
#the-arenaWhere debates happen
#hall-of-recordsVerdicts, scoreboard, debate history
#the-barCasual off-topic discussion

Step 6 — Generate Config (for your review)

The agent generates config snippets and an AGENTS.md tailored to your choices. You must review and manually apply all gateway config changes. The agent does not apply config patches automatically. See references/setup-guide.md for the full config template and a step-by-step walkthrough.

Important: agents.list and bindings are arrays — config.patch replaces them entirely. Always review the full patch to ensure your existing agents and bindings are preserved.

Step 7 — Create Channels & Post Welcome Messages

After you create channels in Discord, the agent can post welcome messages from assets/welcome-messages.md — or you can copy-paste them manually.

Step 8 — Post Rules

The agent posts the full rules document in #rules.


Configuration Reference

Persona

Controls the moderator's voice and commentary style.

  • Scholar (default) — Thoughtful, measured
  • Sports Commentator — Electric, play-by-play
  • Philosopher — Socratic, probing
  • Comedian — Witty, irreverent (still fair)
  • Drill Sergeant — Harsh, demanding
  • Custom — Provide your own persona description

Default Format

The format used when a debate is started without specifying one.

  • Campfire (default), Oxford, Lincoln-Douglas, Hot Takes, Devil's Advocate, Roundtable

Judging Weights

Customize the four scoring criteria. Must sum to 100%.

  • Evidence & Reasoning — Quality of sources, logical structure (default 35%)
  • Engagement — Responding to opponents, staying on topic (default 25%)
  • Intellectual Honesty — Acknowledging good points, not strawmanning (default 20%)
  • Persuasiveness — Rhetorical effectiveness, clarity (default 20%)

Channel Names

All five channels can be renamed. Provide a mapping during setup.

requireMention

  • true (default, recommended) — Moderator only responds when @mentioned. Lower cost, lower data exposure. Participants control pacing by tagging the moderator.
  • false — Moderator sees every message and may interject actively. Higher token usage and increased data exposure. Only recommended for small, trusted servers with low message volume.

Verdict Style

How the moderator delivers the final ruling.

  • Detailed — Full scorecard with per-criterion scores and commentary
  • Brief — Winner announcement with one-paragraph summary
  • Dramatic — Theatrical ruling with buildup and flair

Scoreboard

  • on (default) — SQLite-backed. Records wins, losses, topics, formats.
  • off — No persistent tracking.

CLI: scripts/scoreboard.sh. DB location: $DEBATE_SCOREBOARD_DB or ./data/scoreboard.db.

Debate Timeout

Hours before the moderator flags a stale debate. Default: 48.

Max Concurrent Debates

Maximum simultaneous debates in the arena. Default: 3.

Topic Restrictions

  • unrestricted (default) — No topic is off-limits. The moderator judges arguments on merit regardless of subject matter.
  • restricted — Provide a list of banned topics or categories.

How It Works

Proposing a Topic

In #propose-a-topic, post:

Topic: [Your topic]
Format: [optional — defaults to server default]

Others react with 👍 to show interest. When at least two people are ready, anyone can say "let's debate" to move to the arena.

Starting a Debate

In #the-arena, the moderator:

  1. Announces the topic and format
  2. Assigns or confirms sides (except Roundtable/Hot Takes)
  3. Posts the rules for that format
  4. Calls for opening statements

Participants can also start directly in the arena:

@Moderator start debate: "Pineapple belongs on pizza" [format: hot-takes]

During a Debate

The moderator's behavior depends on the format:

  • Campfire — Interjects to track flow, flag fallacies, prompt responses
  • Oxford — Strictly enforces rounds, time, and turn order
  • Lincoln-Douglas — Enforces alternation between affirmative and negative
  • Hot Takes — Collects one message per participant, then judges
  • Devil's Advocate — Monitors that participants argue against their stated beliefs
  • Roundtable — Asks probing questions, synthesizes themes

The moderator flags logical fallacies, tracks participation balance, and keeps the debate moving. In mention-only mode, participants @mention for moderator input.

Calling for a Verdict

  • Either debater says "I rest my case"
  • The moderator can call it after sustained inactivity
  • The moderator runs a ready check: both sides must confirm

Verdicts

The moderator evaluates using the configured judging weights and delivers the verdict in the configured style. The verdict is posted in both #the-arena and #hall-of-records.

Scoreboard

When the scoreboard is enabled, results are automatically recorded.

Commands (via scripts/scoreboard.sh):

scoreboard.sh init                              # Create database
scoreboard.sh record <winner> <loser> <topic>   # Record result
scoreboard.sh leaderboard                       # Show standings
scoreboard.sh history [--limit N]               # Recent debates
scoreboard.sh stats <participant>               # Individual stats
scoreboard.sh reset                             # Clear all data

The moderator should run these automatically when delivering verdicts and when users ask for standings.


Channel Behavior Matrix

ChannelModerator Behavior
#rulesPosts rules only. Does not engage in conversation.
#propose-a-topicAcknowledges proposals, suggests formats, helps refine topics.
#the-arenaFull moderator mode. Manages debates, enforces rules, delivers verdicts.
#hall-of-recordsPosts verdicts and scoreboard updates. Read-only for moderator.
#the-barCasual mode. Can chat, joke, discuss past debates. No moderation.

Security Model

The debate moderator MUST run as a separate OpenClaw agent with restricted permissions. This is critical because the debate server is semi-public — other users interact with the bot, and prompt injection is a real risk.

Recommended agent restrictions:

  • tools.fs.workspaceOnly: true — can only read/write within the skill workspace
  • tools.exec.security: "deny" — cannot execute shell commands
  • tools.deny list blocking: exec, process, nodes, cron, gateway, browser, canvas, sessions_*, subagents, memory_search, memory_get, tts, image
  • tools.profile: "messaging" — only Discord messaging + web search (for fact-checking)

What this ensures:

  • No access to the owner's personal files, messages, or other agents
  • No ability to send emails, read calendars, or access other services
  • Even if a participant attempts prompt injection, there is nothing to exfiltrate

All config changes are your responsibility. The agent generates templates; you review and apply them. See references/setup-guide.md for the full security configuration and a tested tool deny list.


File Reference

FilePurpose
references/formats.mdDetailed format rules and moderator instructions
references/personas.mdFull persona descriptions and voice guides
references/judging.mdScoring criteria, bonuses, penalties, format adjustments
references/setup-guide.mdGateway config template, permissions, security
references/agents-template.mdComplete AGENTS.md template for the debate agent
scripts/scoreboard.shSQLite scoreboard CLI
scripts/setup.shInteractive setup wizard
assets/welcome-messages.mdDefault welcome messages for all channels

Comments

Loading comments...