Rocom

Roco Kingdom World offline data tool. Local JSON queries for pets, skills, and items.

This package appears to be an offline Node.js data browser and its file list (many static JSONs) matches that purpose, but because it includes an executable JS file you should not run it blindly. Before installing or running: 1) open and review rocom.mjs for any network calls (http, https, fetch, net, axios, request), child_process usage, or reads/writes to unexpected file paths; 2) search the code for strings like 'fetch', 'http', 'https', 'net', 'dgram', 'child_process', 'exec', 'spawn', or 'require("fs")' reading outside ./data; 3) run it first in a sandboxed environment or with network disabled; 4) check the SKILL.md for hidden/unusual characters (the scanner flagged unicode control chars) and remove them; 5) verify licensing: data claims CC BY-NC-SA which may restrict redistribution. If you cannot inspect the JS file, treat this skill as untrusted and avoid running it with network access or on sensitive hosts.

Type: OpenClaw Skill Name: rocom Version: 1.5.0 The 'rocom' skill is a legitimate offline data utility for game statistics. The primary execution script, 'rocom.mjs', is a simple Node.js tool that performs read-only operations on local JSON files within the 'data/' directory. It contains no network modules, no external dependencies, and no credential-handling logic. The documentation in 'SKILL.md' and 'references/game-knowledge.md' provides standard usage instructions and guidance for the AI agent without any evidence of prompt injection or malicious intent.