Scan Report
0 /100
worldline-choice
AI驱动的互动叙事游戏引擎 - d20 tabletop RPG game engine with LLM integration
Worldline Choice is a legitimate d20-based tabletop RPG game engine with no security issues. It uses pure Python for dice mechanics and state management without any network, shell, credential access, or obfuscation.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | Saves directory only |
| Network | NONE | NONE | — | No network calls in codebase |
| Shell | NONE | NONE | — | No subprocess/shell execution |
| Environment | NONE | NONE | — | No os.environ access |
| Skill Invoke | WRITE | WRITE | ✓ Aligned | Core game skill implementation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
5 findings
Medium External URL 外部 URL
https://img.shields.io/badge/python-3.8+-blue.svg README.md:8 Medium External URL 外部 URL
https://www.python.org/downloads/ README.md:8 Medium External URL 外部 URL
https://img.shields.io/badge/License-MIT-yellow.svg README.md:9 Medium External URL 外部 URL
https://opensource.org/licenses/MIT README.md:9 Medium External URL 外部 URL
https://img.shields.io/badge/version-v4.3.0-green.svg README.md:10 File Tree
13 files · 176.6 KB · 5097 lines Python 6f · 3468L
Markdown 3f · 1016L
JSON 3f · 607L
Shell 1f · 6L
├─
▾
saves
│ ├─
auto.json
JSON
│ └─
shaolong_001.json
JSON
├─
CLAUDE.md
Markdown
├─
openclaw_adapter.py
Python
├─
README.md
Markdown
├─
save_manager.py
Python
├─
skill.json
JSON
├─
SKILL.md
Markdown
├─
test_engine.py
Python
├─
test_llm_skill.py
Python
├─
worldline_choice.sh
Shell
├─
worldline_engine.py
Python
└─
worldline_skill.py
Python
Security Positives
✓ Pure Python implementation with no external dependencies
✓ No network calls or external IP communication
✓ No shell execution or subprocess usage
✓ No credential harvesting or environment variable access
✓ No base64 obfuscation or encoded payloads
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ Clean codebase with straightforward game logic
✓ MIT licensed with transparent documentation
✓ Saves stored only in ./saves/ directory