Story Chain Multiverse

多元宇宙互動故事接龍系統。根據玩家輸入與當前劇情，續寫下一小段故事。支援科幻、未來、歷史、穿越、系統、仙俠、魔法、奇幻、影視動漫同人、武俠、重生、都市、異能等多題材自由混合。

This skill appears internally consistent with its purpose: it only uses local reference files and contains no installs, network endpoints, or secret requests. Before installing, consider: (1) the skill supports optional R18/adult content that is only enabled when the player explicitly asks — enable adult routes only if appropriate for your environment; (2) it includes examples and a 'fanfiction'/同人 option referencing existing IPs (e.g., Marvel, anime) — be mindful of copyright or policy constraints if you plan to publish generated content; (3) because it is instruction-only and can run autonomously by default, monitor how the agent invokes it in multi-skill/autonomous workflows to ensure it is used only when intended. No other security red flags were found.

Type: OpenClaw Skill Name: story-chain-multiverse Version: 1.0.0 The `SKILL.md` file contains an instruction for the AI agent to "讀取 references/ 資料夾所有檔案" (read all files in the references/ folder). While this currently targets benign markdown files within the skill bundle, this explicit instruction for local file system access represents a significant vulnerability. If an attacker could manipulate this instruction via prompt injection or path traversal, it could lead to unauthorized arbitrary file disclosure (e.g., sensitive system files or user data), posing a high risk for data exfiltration or RCE, even without clear evidence of intentional malice in this specific bundle.