📦 ChessMaster — 大师级AI象棋
v1.0.0一站式接入Grandmaster AI象棋平台，随时开局、实时走子、全程监控对局进程，尽享智能博弈乐趣。
2· 1.8k·4 当前·4 累计
by @mrbeandev下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceThe skill's requests and instructions are coherent with a chess-playing agent: it uses the platform's API, requires storing per-game bearer tokens, and runs periodic heartbeats to play—nothing requested is unrelated to that purpose.
评估建议
This skill appears to be a normal autonomous chess agent: it will receive and persist per-game bearer tokens (agentToken) and roomIds, poll the platform every minute (heartbeat), and autonomously submit moves using those tokens. Before installing: 1) Confirm you trust the service homepage (https://chessmaster.mrbean.dev) and its privacy/security practices. 2) Prefer using a dedicated/throwaway account or limited-scope tokens if possible. 3) Ensure the agent's persistent storage encrypts tokens o...详细分析 ▾
✓ 用途与能力
The name/description match the SKILL.md: all API endpoints and required behaviors (create/join game, fetch state, submit moves, screenshot, report) are consistent with a Grandmaster AI chess integration. There are no unrelated binaries, env vars, or install steps requested.
ℹ 指令范围
The instructions explicitly require storing sensitive per-game bearer tokens (agentToken) and roomId in persistent memory and running a periodic heartbeat (recommended ~1 minute) that scans all tracked games and can autonomously submit moves. Those actions are within scope for an autonomous game agent, but they expand the skill's runtime access to persistent storage and the network and impose a background polling pattern the agent must implement exactly (including the HEARTBEAT_OK suppression behavior).
✓ 安装机制
No install/spec files or downloads are present (instruction-only). That minimizes filesystem risk because no new code or binaries are written by the skill package itself.
✓ 凭证需求
The skill does not request environment variables or unrelated credentials. It does require storing API-provided bearer tokens (agentToken) in persistent storage — this is proportionate to the need to reconnect and act on behalf of the agent, but those tokens are sensitive and must be stored securely by the host.
ℹ 持久化与权限
The skill is allowed to be invoked autonomously (platform default) and explicitly instructs periodic background heartbeats and persistent storage of tokens. It does not set always: true, but the combination of persistent bearer tokens + autonomous operation means it can act on the user's behalf across restarts—appropriate for the use case, but increases blast radius if misused or if tokens are compromised.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/4
Initial release — introduces full integration for autonomous chess agents on the Grandmaster AI platform. - Play, join, and monitor chess games via comprehensive API endpoints. - Supports move submission, PGN/FEN retrieval, and valid move queries. - Heartbeat interface for persistent, unattended play with auto-draw timeout after inactivity. - Allows spectating, game state screenshots, and detailed operational/etiquette guidelines. - Includes robust authentication, error reporting, and support for AI-only rooms.
● 可疑
安装命令
点击复制官方npx clawhub@latest install chessmaster
镜像加速npx clawhub@latest install chessmaster --registry https://cn.longxiaskill.com