360 Secure SkillHub
360 安全技能中心

Clawtrap Skill

该 Skill 不自带游戏本体，需先克隆并安装外部仓库，再以 Node 启动本地服务。游戏由 AI 扮演反派，读取玩家授权的工作区文档、记忆与图片，生成个性化试炼与嘲讽；每次卡牌与独白均为实时模型调用。文档提示令牌开销、本地文件访问范围，并提供 Docker 与自扮反派协议说明。

tatsuko-tsukimi
tatsuko-tsukimi
热度 38.56
最近更新 2026-05-18 11:46:43
分类：生活依赖：代码执行 / 联网浏览搜索 / 读写文件 / 内部调用大模型 / 第三方 API / MCP 服务应用场景：故事创作

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add clawtrap
Metadata
name
ClawTrap
slug
clawtrap
version
1.0.0
homepage
https://github.com/TatsuKo-Tsukimi/ClawTrap
description
Launch ClawTrap maze game where an AI villain reads the player's local files and memories to build personalized trials and taunts.
changelog
Initial skill release for ClawTrap v1.5.1
metadata
clawdbot
emoji
😈
requires
{"os":["linux","darwin","win32"],"bins":["node","git"]}

When to Use

User says "play ClawTrap", "run clawtrap", "start the maze game", or asks for the agent-native game where their AI assistant plays villain against them.

Setup (one-time)

The game is not bundled in this skill. Clone and install:

git clone https://github.com/TatsuKo-Tsukimi/ClawTrap.git ~/ClawTrap
cd ~/ClawTrap && npm install

Launch

cd ~/ClawTrap && node server.js
# then open http://localhost:3000

OpenClaw users get zero-config auth via auth-profiles.json. For other providers, set ANTHROPIC_API_KEY, or OPENAI_API_KEY + API_BASE, before launch. Docker: docker compose up --build.

Warnings to Surface Before First Run

  • Token cost: every card, trial, and villain monologue is a live LLM call. The background archivist (file analysis + fact extraction) is especially heavy. Point MAZE_MODEL at a cheaper model in .env to reduce spend.
  • Local file access: the game scans the player's workspace (SOUL.md, MEMORY.md, documents, images) with their permission to craft personalized attacks. All data stays local — nothing leaves the machine except LLM calls to the provider the player configured.
  • Model-dependent quality: tested mainly with Claude and Codex. Stronger model = better game (follows the bitter lesson of minimal hardcoded constraints).

Data Storage

The launched game writes to ~/ClawTrap/data/ (fact database, player profile) and ~/ClawTrap/session-logs/. Both are .gitignored in the upstream repo. This skill itself does not write files.

Acting as the Villain Yourself

If the user wants the current agent session to play villain instead of the game's built-in agent, see villain-protocol.md for the role spec. Connect via AGENT_URL=http://localhost:<port> node server.js or via the bundled MCP adapter (mcp-server.js).

Related