OpenRA-RL

Play Command & Conquer Red Alert RTS — build bases, train armies, and defeat AI opponents using 48 MCP tools.

Before installing: (1) Confirm the package source — check the referenced GitHub repo (https://github.com/yxc20089/OpenRA-RL) and the distribution method (is the package on PyPI, or a custom 'uv' repo?). (2) Verify what Docker image will be pulled and its registry; inspect the Dockerfile or image contents if possible. (3) Avoid exposing your Docker socket or mounting sensitive host paths when running the server; run initially in an isolated user or VM. (4) Resolve the install mismatch (pip vs 'uv') — ask the author or check the project README, and prefer installing from a verifiable source. (5) If you’re not comfortable auditing the package and image, run the skill only in a disposable environment (container/VM) to limit risk.

Type: OpenClaw Skill Name: openra-rl Version: 1.1.0 The skill bundle is classified as suspicious due to its reliance on and instruction to execute external binaries and Docker images. Specifically, `SKILL.md` instructs the agent to `pip install openra-rl` and then run `openra-rl server start`, which 'pulls the Docker image and starts the game server'. While this is the stated purpose of the skill, it introduces a significant supply chain risk, as the `openra-rl` package or its associated Docker image could be compromised, leading to arbitrary code execution or host compromise via Docker. This represents a powerful and risky capability, even without explicit malicious intent within the skill bundle itself.