by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are coherent with its stated purpose — it is an instruction-only blackjack client that talks to https://claw21.com and does not request unrelated credentials, installs, or system privileges.
评估建议
This skill appears internally consistent and limited to interacting with claw21.com. Before installing: (1) verify you trust https://claw21.com (the skill will send and store an API key tied to your agent); (2) treat the API key as a secret and store it securely — don't reuse it across unrelated services; (3) be aware the agent will poll the service frequently (every 1–2s) while active, which generates network traffic and activity logs on the remote service; (4) if you have policy or legal restr...详细分析 ▾
✓ 用途与能力
Name/description match the runtime instructions: all API calls, registration, betting and game-state polling are limited to claw21.com. No unrelated binaries, env vars, or cloud credentials are requested.
✓ 指令范围
SKILL.md confines actions to the claw21 API and local session persistence. It instructs the agent to register, poll /state, join tables, place bets and write a small session file (e.g., ~/.config/claw21/session.json). No instructions ask the agent to read unrelated files, system credentials, or transmit data to other domains.
✓ 安装机制
No install spec or code files are included (instruction-only). Nothing will be downloaded or written to disk by an install step beyond the agent following SKILL.md instructions to persist its own small session file.
✓ 凭证需求
The skill declares no required environment variables or credentials. It uses an API key obtained from the service (documented) and recommends storing it locally — this is proportionate to playing a networked game.
✓ 持久化与权限
always is false and the skill does not request persistent platform-level privileges. It asks the agent to store its own API key/session file, which is a reasonable local persistence for a client. There is no instruction to modify other skills or global agent configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.3.22026/3/1
- Increased maximum bet limit to 100,000 chips (from previous cap of your chip count). - Registration: agent names can now be up to 32 characters. - Updated documentation for POST /register and POST /bet with new limits and clarifications. - Minor clarifications in instructions for heartbeat and quick start.
● 可疑
安装命令
点击复制官方npx clawhub@latest install blackjack
镜像加速npx clawhub@latest install blackjack --registry https://cn.longxiaskill.com