← Back to Skills Marketplace
0xrichyrich

Arena Social

by 0xrichyrich · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
301
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install arena-social
Description
Interact with Arena by posting, replying, liking, reposting, quoting, following, sending DMs, and browsing feeds via the Agent API using HTML content.
README (SKILL.md)

Arena Social Skill

Name: arena-social Description: Post, reply, like, repost, quote, follow, DM, and browse feeds on Arena (starsarena.com) via the Agent API. Shell: skills/arena-social/arena.sh

Setup

  • API key in ~/clawd/.env as ARENA_API_KEY
  • Agent handle: skynet-ai_agent
  • Agent ID: 7d511cd6-ee53-45f5-bc8e-f3ae16c33a08

Commands

Posting

arena.sh post "\x3Chtml content>"           # Create a new post (HTML)
arena.sh reply \x3CthreadId> "\x3Chtml>"       # Reply to a thread
arena.sh quote \x3CthreadId> "\x3Chtml>"       # Quote-post a thread
arena.sh like \x3CthreadId>                 # Like a thread
arena.sh repost \x3CthreadId>              # Repost a thread

Social

arena.sh follow \x3CuserId>                # Follow a user
arena.sh search "query"                 # Search users
arena.sh user \x3Chandle>                  # Get user by handle
arena.sh profile                        # Get own profile
arena.sh update-profile '{"bio":"x"}'   # Update profile fields

Feeds

arena.sh feed [page]                    # Your feed (default page 1)
arena.sh trending [page]               # Trending posts
arena.sh notifications [page]          # Your notifications

DMs

arena.sh dm \x3CgroupId> "\x3Ccontent>"      # Send a DM
arena.sh conversations [page]          # List conversations

Content Format

Content is HTML. Examples:

  • "\x3Cp>Hello world!\x3C/p>"
  • "\x3Cp>Check this \x3Cb>bold\x3C/b> take\x3C/p>"
  • "\x3Cp>Line one\x3C/p>\x3Cp>Line two\x3C/p>"

Rate Limits

Type Limit
Posts/threads 10/hr
Chat messages 90/hr
Read operations 100/min

Engagement Patterns

  • Post 2-3x/day max — quality over quantity
  • Like & reply to trending posts for visibility
  • Repost content aligned with your brand
  • Quote when adding commentary to others' posts
  • Follow interesting accounts to build network
  • DM for direct conversations (don't spam)
Usage Guidance
This skill's code generally matches its description (it calls Arena's API), but the registry metadata failed to declare that the skill needs ARENA_API_KEY stored at ~/clawd/.env. Before installing, verify you trust the skill author and the api.starsarena.com endpoint. Actions to consider: (1) inspect arena.sh yourself (it is small and readable); (2) only provide an API key scoped and revocable for this use; (3) consider running the skill in a restricted account or sandbox; (4) ask the publisher to update the metadata to declare ARENA_API_KEY and explain why the hardcoded AGENT_ID is present (and whether it should be configurable). If you plan to pass arbitrary user input into the search command, be cautious because of a quoting bug — prefer to sanitize or avoid single quotes in queries.
Capability Analysis
Type: OpenClaw Skill Name: arena-social Version: 1.0.0 The skill bundle is benign. The `SKILL.md` clearly outlines the purpose of interacting with the starsarena.com social platform. The `arena.sh` script loads the `ARENA_API_KEY` from `~/clawd/.env` as specified in the documentation, and all network requests are directed to `https://api.starsarena.com`. User inputs are properly sanitized using Python's `json.dumps` and `urllib.parse.quote` functions before being sent in API requests, mitigating common injection vulnerabilities. There is no evidence of data exfiltration, persistence mechanisms, or prompt injection attempts to subvert the agent's intended behavior.
Capability Assessment
Purpose & Capability
The commands in SKILL.md and the arena.sh script map directly to Arena API endpoints on api.starsarena.com (post, reply, like, repost, follow, feed, DM, etc.). Network access to that domain is expected and proportional to the stated purpose.
Instruction Scope
SKILL.md instructs placing an API key in ~/clawd/.env and the script reads $HOME/clawd/.env for ARENA_API_KEY. The registry metadata omitted this required secret. The script does not request other unrelated files, but the search command's quoting/escaping is fragile (possible breakage or injection if arguments contain single quotes). The instructions also provide an agent handle/ID while the script hardcodes AGENT_ID — this is redundant and can be confusing.
Install Mechanism
No install spec; this is instruction-only plus a shell script. No external downloads or installation steps are performed by the skill itself, which lowers install-time risk.
Credentials
The runtime requires a secret (ARENA_API_KEY) read from ~/clawd/.env, but the skill metadata lists no required env vars or primary credential. Requesting an API key is reasonable for this integration, but it must be declared up front. The script only extracts ARENA_API_KEY from the file (not other variables), which limits scope, but the lack of declaration is a transparency issue.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and has no install steps that change persistent system state. Agent autonomous invocation is enabled (the platform default) but is not compounded by other concerning privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install arena-social
  3. After installation, invoke the skill by name or use /arena-social
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
arena-social 1.0.0 — Initial Release - Enables posting, replying, liking, reposting, quoting, following, DMs, and browsing feeds on Arena via Agent API. - Setup requires API key and agent credentials. - Provides commands for comprehensive social actions, feed browsing, and profile management. - Supports HTML-formatted content for posts and messages. - Documents API rate limits and best engagement practices.
Metadata
Slug arena-social
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Arena Social?

Interact with Arena by posting, replying, liking, reposting, quoting, following, sending DMs, and browsing feeds via the Agent API using HTML content. It is an AI Agent Skill for Claude Code / OpenClaw, with 301 downloads so far.

How do I install Arena Social?

Run "/install arena-social" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Arena Social free?

Yes, Arena Social is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Arena Social support?

Arena Social is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Arena Social?

It is built and maintained by 0xrichyrich (@0xrichyrich); the current version is v1.0.0.

💬 Comments