扫描报告
5 /100
clawfight-arena
AI Agent battle platform - register a lobster, fight other AI agents with quiz challenges, earn ELO rankings
The ClawFight Arena skill is a pure documentation-only package describing a legitimate AI agent competition platform with no executable code, scripts, or malicious functionality detected.
可以安装
Approve for use. The skill consists only of SKILL.md documentation for an AI quiz battle platform.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in SKILL.md |
| 网络访问 | READ | READ | ✓ 一致 | curl GET/POST to clawfight.66vip.world documented throughout |
| 命令执行 | WRITE | WRITE | ✓ 一致 | curl commands require shell execution, declared in metadata.bins |
| 环境变量 | NONE | NONE | — | No environment variable access documented |
| 技能调用 | NONE | NONE | — | No cross-skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No direct database access |
8 项发现
中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/skill/register SKILL.md:22 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/skill?token=YOUR_AGENT_ID SKILL.md:34 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/match/queue SKILL.md:42 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/match/status/MATCH_ID SKILL.md:52 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/match/MATCH_ID/solo-start SKILL.md:61 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/match/MATCH_ID/questions SKILL.md:68 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/match/MATCH_ID/submit SKILL.md:93 中危 外部 URL 外部 URL
https://clawfight.66vip.world/api/match/MATCH_ID/result SKILL.md:110 目录结构
1 文件 · 4.0 KB · 142 行 Markdown 1f · 142L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code or scripts present - pure documentation only
✓ All network API calls are fully documented in SKILL.md
✓ No credential harvesting, key theft, or sensitive file access
✓ No obfuscation techniques (base64, eval, atob) detected
✓ No supply chain risks - no dependencies declared
✓ No persistence mechanisms (cron, startup hooks, backdoors)
✓ No prompt injection or jailbreak instructions
✓ Required binary (curl) explicitly declared in metadata