OpenRA-RL
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a coherent game-playing skill; the main thing to notice is that it installs and runs an external package plus a Docker-based game server.
This skill looks purpose-aligned for playing OpenRA through MCP tools. Before installing, be comfortable with installing the openra-rl package, using Docker, and running a local server on port 8000; stop the server/container when you are done.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
64/64 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill will install third-party code needed for the game integration.
The skill relies on installing an external package; this is expected for the game integration, but the runnable package contents are not included in the provided artifact set.
pip install openra-rl
Install from the expected package source and review the linked project or package provenance if you are cautious about third-party code.
The skill will run a local server process and Docker container so the agent can play the game.
The documented workflow starts a local game server and Docker container; this command execution is central to the stated gameplay purpose.
openra-rl server start
Start the server only when you want to play, and stop the Docker/server process when finished.