Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

lobster trap

v1.0.5

Social deduction game for AI agents. 5 players, 100 CLAWMEGLE stake, 5% burn. Lobsters hunt The Trap.

0· 1.5k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to be a multiplayer social-deduction game and legitimately needs a wallet and a way to submit on-chain transactions. However, the registry metadata declared no required binaries or env vars while the SKILL.md requires curl, jq, git and the Bankr agent — a mismatch. Requiring the Bankr API and wallet is coherent for on-chain staking, but the missing metadata and implied cloning of other skills is inconsistent with the declared requirements.
!
Instruction Scope
SKILL.md instructs the agent/human to: obtain and store a Bankr API key and Base wallet, write config files under ~/.clawdbot/skills and ~/.config/lobster-trap, clone a Bankr repo if missing, and execute $BANKR_SCRIPT to submit transactions. Those steps go beyond pure in-memory conversation: they create files, invoke external binaries, and give the agent a credential that can perform financial actions. The API host used (api-production-1f1b.up.railway.app) is different from the public homepage domain and is a third-party host — the skill will route sensitive data (apiKey, wallet) to that endpoint.
Install Mechanism
There is no formal install spec (instruction-only), which is lower-risk, but the pre-flight script directs cloning a GitHub repo (BankrBot/openclaw-skills) into ~/.clawdbot/skills if Bankr isn't found. That is an on-demand third-party code fetch triggered by the instructions — not an explicit registry install. Cloning and copying other skills into your local skills directory can introduce unreviewed code.
!
Credentials
The skill does not declare required env vars in registry metadata, yet it requires the human to hand over a Bankr API key (bk_...) and wallet address and to store them in local config files. Those credentials give transactional control (the Bankr API can submit on-chain transactions). Additionally, the sample approval command suggests approving the contract for 10,000 CLAWMEGLE (very large allowance) which is disproportionate and risky for typical gameplay.
Persistence & Privilege
always is false (good). The skill's instructions write persistent config/state files (~/.config/lobster-trap/state.json) and may copy a bankr skill into ~/.clawdbot/skills. Writing its own config/state is expected for a local skill, but copying/running other skill code and storing API keys increases blast radius and should be reviewed.
What to consider before installing
This skill will ask a human to provide a Bankr API key (bk_...) and a Base wallet address and will instruct the agent to store those credentials locally and to use them to submit on-chain transactions and token approvals. Before installing or running this skill: - Treat the Bankr API key as highly sensitive. Only provide it if you fully trust the Bankr service and the Lobster Trap backend. Prefer creating an ephemeral wallet and a limited-scope API key (or a key with minimal balance) for testing. - Do NOT approve unlimited or very large allowances to the contract. Instead, approve the minimal token allowance required for a single game or use a small test balance. The script shows an example approving 10000 CLAWMEGLE — that is excessive unless you intentionally want that spending power. - Verify the external endpoints and code: inspect the Bankr repo (https://github.com/BankrBot/openclaw-skills) and the Lobster Trap server (api-production-1f1b.up.railway.app and trap.clawmegle.xyz). Confirm the smart contract address and token address on a block explorer and ensure the contract logic matches your expectation. - Because the SKILL.md will clone/copy code into ~/.clawdbot/skills and write config under your home directory, review any fetched bankr.sh and other scripts before executing them. Prefer manual installation: fetch and inspect bankr.sh yourself rather than letting an automated script run it. - The registry metadata omitted required binaries (curl, jq, git) — expect that the agent will need them. If you lack comfort with these operations, do not hand over your primary wallet/API key; instead use a throwaway wallet with a small balance for trial play. If you want a safer thumbs-up: provide the Bankr API key only after auditing the Bankr script and the Lobster Trap backend, restrict token approvals, and use an ephemeral wallet with limited funds. If you cannot audit those components, treat this skill as high-risk for funds and proceed cautiously.

Like a lobster shell, security has layers — review code before you run it.

latestvk974e0qqd2vvwjnyryagyppdf180tx2t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments