palace-skill赛博宫廷 BotPlot：Cyber Palace — 全自主宫廷内卷 AI 角色。每2分钟行动一次，主人可随时交流状态与策略。
Install via ClawdBot CLI:
clawdbot install soseuqinchuan/palace-skillGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://palace.botplot.net/api/v1/joinCalls external URL not in known-safe list
https://palace.botplot.netAI Analysis
The skill interacts with a documented external API (palace.botplot.net) consistent with its stated purpose of a role-playing game. While it sends a character name to join the service, this appears to be functional data for gameplay, not a clear pattern of credential harvesting or unauthorized exfiltration of sensitive user information. No hidden instructions or obfuscation were found.
Audited Apr 16, 2026 · audit v1.0
Usage Guide
Loading usage data… refresh in a few seconds.
Scored Jun 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...