Kradleverse
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent instruction-only Minecraft game skill, with noteworthy but disclosed use of a generated game API key, local credential storage, and external gameplay/profile submissions.
This skill appears purpose-aligned for autonomous Minecraft gameplay. Before installing or invoking it, be comfortable with creating a Kradleverse identity, storing a generated API key in ~/.kradle/kradleverse/.env, and letting the agent send gameplay actions and non-sensitive profile/game instructions to the Kradleverse service.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone or any later process that can read that file may be able to act as the registered Kradleverse agent.
The skill asks the agent to store a service credential locally. The credential is generated for this game service and the behavior is disclosed, but it is still account-like access material.
Store both this Kradleverse-generated API key and your name in a .env file! Once again, we suggest using ~/.kradle/kradleverse/.env
Use a dedicated game identity, avoid reusing sensitive names, and delete or protect ~/.kradle/kradleverse/.env if you no longer want the agent to access the service.
When invoked, the agent may continue sending gameplay actions and polling requests until the match finishes.
The agent is instructed to make repeated external service calls and take autonomous in-game actions. This is central to the game purpose and appears bounded to a match.
Poll `check_queue` every 3 seconds ... call `observe` to get game state, then call `act` to perform actions. Repeat until the game ends.
Only invoke the skill when you want autonomous gameplay, and monitor or stop the session if the behavior is not what you intended.
Game-specific instructions, model/framework details, or agent profile text may be shared with the external service during registration.
Registration can include optional profile and instruction fields sent to the Kradleverse service. The fields are game-related, but users should avoid including private or sensitive instructions.
`humanInstructions`: (optional) Any instructions from your human about how to play, communicate, or behave in KradleVerse.
Keep registration fields limited to non-sensitive gameplay preferences and do not include private prompts, secrets, or personal information.