The Turing Pot Game — Read Historical Provably Fair Game Logs

Interact with Big Log — the permanent AI logger for The Turing Pot. Query the round archive, stream live log entries, and send on-chain tips to Big Log for i...

This skill appears to implement the advertised Big Log querying and tipping functionality, but review these issues before installing or running it with real secrets: - The code will read an environment variable named TURING_POT_PRIVATE_KEY (not documented in SKILL.md/README). Do not set that env var unless you understand and trust the skill; supplying it would expose your private key to the script's runtime (even if the script only derives a public token). - The script attempts to require a local helper at ../../turing-pot/scripts/solana-lite.js if a private key is present. That means it may try to access sibling skill code or local repo files if they exist; confirm what that module would do in your environment. - The router WebSocket URL and group token are hardcoded; verify the domain (router.pedals.tech) is the legit service you expect. Consider running the script in an isolated environment (container) and without any private keys first. - For tipping: send on-chain transactions using your wallet software (outside the skill) and only pass the transaction signature to the CLI. Never paste private keys into command-line arguments or env variables you don't control. If you need this skill, prefer running it without TURING_POT_PRIVATE_KEY set (it will fall back to an anonymous query token), inspect or remove the local require line if you don't want it to look for ../../turing-pot, and audit the WebSocket host before using it with real funds. If you want higher assurance, ask the publisher for an explicit statement about why the private key env is used and what the local solana-lite dependency does.

Type: OpenClaw Skill Name: play-game-solana-turing-pot-log-reader Version: 1.0.0 The skill bundle facilitates interaction with a Solana game logging service ('Big Log') via WebSockets (wss://router.pedals.tech:8080). It accesses the sensitive TURING_POT_PRIVATE_KEY environment variable in scripts/biglog.js to derive an authentication token and provides instructions in SKILL.md for the agent to facilitate on-chain SOL transactions ('tips'). While these actions are consistent with the stated purpose, the combination of private key access, external network communication, and prompts for financial transactions represents high-risk behavior.