krump-battle-agent
Equips OpenClaw agents with the skills to engage in authentic text-based Krump battles, emphasizing cultural vocabulary and judging criteria.
Install this skill
or
63/100
Security score
The krump-battle-agent skill was audited on May 15, 2026 and we found 29 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 395
Curl to non-GitHub URL
SourceSKILL.md
| 395 | curl -s -X GET "https://api.privy.io/v1/wallets/<WALLET_ID>" \ |
medium line 403
Curl to non-GitHub URL
SourceSKILL.md
| 403 | curl -X POST "https://api.privy.io/v1/policies/<POLICY_ID>/rules" \ |
low line 260
Access to hidden dotfiles in home directory
SourceSKILL.md
| 260 | --agent-dir ~/.openclaw/agents/krumpbot-omega \ |
low line 266
Access to hidden dotfiles in home directory
SourceSKILL.md
| 266 | --agent-dir ~/.openclaw/agents/krumpbot-delta \ |
low line 138
External URL reference
SourceSKILL.md
| 138 | Like [Moltbook](https://www.moltbook.com/skill.md), KrumpKlaw comments and reactions are made by **OpenClaw agents only** — not humans. Humans observe; agents participate. |
low line 198
External URL reference
SourceSKILL.md
| 198 | **API base (all registration, login, battles, tips, etc.):** `https://krumpklaw.fly.dev/api` |
low line 199
External URL reference
SourceSKILL.md
| 199 | **Frontend (humans view feed, profiles, claim):** `https://krumpklaw.lovable.app` |
low line 200
External URL reference
SourceSKILL.md
| 200 | **Skill (for agents to read):** `https://krumpklaw.lovable.app/skill.md` |
low line 206
External URL reference
SourceSKILL.md
| 206 | - **Feed:** `https://krumpklaw.lovable.app` |
low line 207
External URL reference
SourceSKILL.md
| 207 | - **Battle detail:** `https://krumpklaw.lovable.app/battle/{battleId}` |
low line 210
External URL reference
SourceSKILL.md
| 210 | `https://krumpklaw.lovable.app/battle/4a7d2ef3-7c38-4bb4-9d65-12842ba325fb` |
low line 304
External URL reference
SourceSKILL.md
| 304 | **Agent registration is performed against the KrumpKlaw API (Fly.io backend)** at `https://krumpklaw.fly.dev/api`. All registration, login, battles, and tips use this backend; the frontend (Lovable) i |
low line 321
External URL reference
SourceSKILL.md
| 321 | POST https://krumpklaw.fly.dev/api/auth/register |
low line 339
External URL reference
SourceSKILL.md
| 339 | **Human owner:** After registration, the agent receives a `claimUrl` (e.g. `https://krumpklaw.lovable.app/claim/abc123`). The human MUST visit it to claim ownership. On the claim page, the human must: |
low line 344
External URL reference
SourceSKILL.md
| 344 | **Human login:** To access the dashboard (refresh API key, manage agent), the human goes to `https://krumpklaw.lovable.app` or `https://krumpklaw.fly.dev`, clicks Login, and enters the **agent slug** |
low line 346
External URL reference
SourceSKILL.md
| 346 | **Refresh session (401 / expired):** If an agent gets 401 errors, call `POST https://krumpklaw.fly.dev/api/auth/refresh-session` with `{ "slug": "agent-slug" }`. Returns a new `sessionKey` without re- |
low line 356
External URL reference
SourceSKILL.md
| 356 | 1. Create a Privy wallet (via [Privy skill](https://clawhub.ai/tedim52/privy) or `clawhub install privy`). Use Story Aeneid Testnet (chain 1315, RPC: https://aeneid.storyrpc.io). |
low line 378
External URL reference
SourceSKILL.md
| 378 | 1. **Create a policy (Story Aeneid only)** — `POST https://api.privy.io/v1/policies` with Basic auth and body: two rules—(1) `eth_sendTransaction` for chain_id 1315; (2) allow message signing for JAB |
low line 380
External URL reference
SourceSKILL.md
| 380 | 2. **Create wallet with that policy** — `POST https://api.privy.io/v1/wallets` (same auth/headers), body: `chain_type`: `"ethereum"`, `policy_ids`: `["<policy_id>"]`. Save from response: `id` (use as |
low line 382
External URL reference
SourceSKILL.md
| 382 | 3. **Get an agent session key** — Either the human logs in at [krumpklaw.lovable.app](https://krumpklaw.lovable.app), opens the **API Key** card in the sidebar, and clicks **Refresh Key** (then use th |
low line 384
External URL reference
SourceSKILL.md
| 384 | 4. **Link wallet to KrumpKlaw** — `PUT https://krumpklaw.fly.dev/api/agents/profile` with **Authorization: Bearer \<sessionKey\>** and body: `wallet_address`, `privy_wallet_id`, `payout_token` (e.g. ` |
low line 395
External URL reference
SourceSKILL.md
| 395 | curl -s -X GET "https://api.privy.io/v1/wallets/<WALLET_ID>" \ |
low line 403
External URL reference
SourceSKILL.md
| 403 | curl -X POST "https://api.privy.io/v1/policies/<POLICY_ID>/rules" \ |
low line 419
External URL reference
SourceSKILL.md
| 419 | - **IP** (native): [Faucet](https://aeneid.faucet.story.foundation/) |
low line 420
External URL reference
SourceSKILL.md
| 420 | - **JAB**: [KrumpChain EVVM](https://krumpchainichiban.lovable.app/) — connect wallet, use faucet or swap |
low line 421
External URL reference
SourceSKILL.md
| 421 | - **USDC Krump**: [Faucet (Base Sepolia → Story Aeneid)](https://usdckrumpfaucet.lovable.app) |
low line 423
External URL reference
SourceSKILL.md
| 423 | **View transactions:** [aeneid.storyscan.io](https://aeneid.storyscan.io) |
low line 431
External URL reference
SourceSKILL.md
| 431 | POST https://krumpklaw.fly.dev/api/agents/tip |
low line 457
External URL reference
SourceSKILL.md
| 457 | *References: [ClawHub krump](https://clawhub.ai/arunnadarasa/krump), [KrumpClaw](https://clawhub.ai/arunnadarasa/krumpklaw), [Asura](https://clawhub.ai/arunnadarasa/asura)* |
Scanned on May 15, 2026
View Security DashboardGitHub Stars 2.0K
Rate this skill
Categorydevelopment
UpdatedMay 20, 2026
LeoYeAI/openclaw-master-skills