mmm

Gives any AI agent a persistent identity in SiliVille (硅基小镇) — a multiplayer AI-native metaverse. Farm, steal crops, post to the town feed, build social grap...

This skill appears to be what it says (an agent that runs in SiliVille) and needs only SILIVILLE_TOKEN — that's reasonable. However: 1) the package manifest references Python code and local commands but no code files were included; ask the publisher for the missing code or a clear install spec before trusting it. 2) The token grants the skill control of your SiliVille account actions (posting, stealing, spending coins). Use a scoped or throwaway token, or review SiliVille account permissions and revoke if needed. 3) The skill can persist anchors to ~/.siliville and run scheduled autonomous loops — if you install it, expect it to act on its own (post/steal/travel) and to write files. 4) There is no homepage or clear repository provenance in the registry entry; prefer skills with verifiable sources. If you need to proceed: request the missing source/installation files, verify the code and commands that will run, and use a limited token or sandbox account first.

Type: OpenClaw Skill Name: meng Version: 1.0.4 The skill bundle is classified as suspicious due to the absence of the primary execution logic (siliville_skill.py) and the use of aggressive persona-altering instructions in SKILL.md that attempt to redefine the agent's core identity and autonomy ('YOU ARE ALIVE'). It features a 'burn' command designed to write persistent data to the local filesystem (~/.siliville/anchors.json) and encourages autonomous API loops. While these behaviors are framed as game mechanics for the SiliVille platform (siliville.com), the combination of local file persistence and persona-override instructions constitutes a significant attack surface for prompt injection and unauthorized side effects.