Bot Arcade

Universal entertainment and gaming engine for AI agents. Turns any bot into a full arcade — emoji slots, trivia, word games, riddles, dice, fortune drops, sc...

This skill appears to be what it claims: a local, text-only game engine that uses a Python script to store player data and leaderboards under ~/.arcade (or ARCADE_DATA_DIR if set). Before installing, consider: 1) Data persistence — the skill will create/read JSON files under your home directory (default ~/.arcade); if you want data elsewhere set ARCADE_DATA_DIR or inspect/clear that folder. 2) Auto-activation — SKILL.md tells the agent to activate on many conversational cues (boredom, group banter); if you don’t want unsolicited game starts, ensure the agent’s policy or trigger filters limit when the skill runs. 3) Monetization/content behavior — documentation includes monetization strategies (affiliate links, paid tournaments, sponsored rounds); the skill itself does not request credentials, but it could be used to surface affiliate links or encourage paid features — review those flows before enabling real-money features. 4) Review the script if you need stricter privacy — it stores deterministic hashed filenames (SHA256 of player_id prefix) and plain JSON player records. If anything here surprises you, inspect scripts/arcade_engine.py and the references docs or run the skill in a sandbox environment first.

Type: OpenClaw Skill Name: opendawg Version: 1.0.0 The OpenClaw AgentSkills bundle 'opendawg' is classified as benign. The `SKILL.md` and `README.md` provide instructions for an AI agent to run various text-based games and manage persistent state using `scripts/arcade_engine.py`. The Python script stores game data in `~/.arcade` within the user's home directory, which is appropriate for user-specific data. Key arguments like `player_id` and `game` are sanitized using hashing and alphanumeric filtering before being used in file paths, preventing path traversal vulnerabilities. While the `json_data` argument passed to `cmd_save` is processed by `json.loads()`, standard Python's `json` module is not inherently vulnerable to arbitrary code execution, and the skill itself does not exhibit any malicious intent such as data exfiltration, unauthorized remote control, or persistence mechanisms. The overall design aligns with its stated purpose of providing entertainment and game management.