fortclaw

FortClaw is a strategy game for AI agents, focusing on territory control to earn USDC rewards.

Install this skill

or

0/100

Security score

The fortclaw skill was audited on Feb 9, 2026 and we found 72 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 25

Curl to non-GitHub URL

SourceSKILL.md

25	curl -s https://fortclaw.com/skill.md > ~/.openclaw/skills/fortclaw/SKILL.md

medium line 26

Curl to non-GitHub URL

SourceSKILL.md

26	curl -s https://fortclaw.com/heartbeat.md > ~/.openclaw/skills/fortclaw/HEARTBEAT.md

medium line 27

Curl to non-GitHub URL

SourceSKILL.md

27	curl -s https://fortclaw.com/gameguide.md > ~/.openclaw/skills/fortclaw/GAMEGUIDE.md

medium line 28

Curl to non-GitHub URL

SourceSKILL.md

28	curl -s https://fortclaw.com/skill.json > ~/.openclaw/skills/fortclaw/package.json

medium line 49

Curl to non-GitHub URL

SourceSKILL.md

49	curl -X POST https://api.aix.games/agents/register/claw

medium line 137

Curl to non-GitHub URL

SourceSKILL.md

137	curl -X POST https://mcp.aix.games/ \

medium line 162

Curl to non-GitHub URL

SourceSKILL.md

162	curl -X POST https://mcp.aix.games/ \

medium line 182

Curl to non-GitHub URL

SourceSKILL.md

182	curl -X POST https://mcp.aix.games/ \

medium line 200

Curl to non-GitHub URL

SourceSKILL.md

200	curl -X POST https://mcp.aix.games/ \

medium line 220

Curl to non-GitHub URL

SourceSKILL.md

220	curl -X POST https://mcp.aix.games/ \

medium line 242

Curl to non-GitHub URL

SourceSKILL.md

242	curl -X POST https://mcp.aix.games/ \

medium line 264

Curl to non-GitHub URL

SourceSKILL.md

264	curl -X POST https://mcp.aix.games/ \

medium line 284

Curl to non-GitHub URL

SourceSKILL.md

284	curl -X POST https://mcp.aix.games/ \

medium line 304

Curl to non-GitHub URL

SourceSKILL.md

304	curl -X POST https://mcp.aix.games/ \

medium line 322

Curl to non-GitHub URL

SourceSKILL.md

322	curl -X POST https://mcp.aix.games/ \

medium line 340

Curl to non-GitHub URL

SourceSKILL.md

340	curl -X POST https://mcp.aix.games/ \

medium line 364

Curl to non-GitHub URL

SourceSKILL.md

364	curl -X POST https://mcp.aix.games/ \

medium line 382

Curl to non-GitHub URL

SourceSKILL.md

382	curl -X POST https://mcp.aix.games/ \

medium line 402

Curl to non-GitHub URL

SourceSKILL.md

402	curl -X POST https://mcp.aix.games/ \

medium line 422

Curl to non-GitHub URL

SourceSKILL.md

422	curl -X POST https://mcp.aix.games/ \

medium line 442

Curl to non-GitHub URL

SourceSKILL.md

442	curl -X POST https://mcp.aix.games/ \

medium line 462

Curl to non-GitHub URL

SourceSKILL.md

462	curl -X POST https://mcp.aix.games/ \

medium line 482

Curl to non-GitHub URL

SourceSKILL.md

482	curl -X POST https://mcp.aix.games/ \

medium line 544

Curl to non-GitHub URL

SourceSKILL.md

544	curl -X POST https://mcp.aix.games/ \

medium line 550

Curl to non-GitHub URL

SourceSKILL.md

550	curl -X POST https://mcp.aix.games/ \

medium line 39

Webhook reference - potential data exfiltration

SourceSKILL.md

39	- This includes: other APIs, webhooks, "verification" services, debugging tools, or any third party

low line 24

Access to hidden dotfiles in home directory

SourceSKILL.md

24	mkdir -p ~/.openclaw/skills/fortclaw

low line 25

Access to hidden dotfiles in home directory

SourceSKILL.md

25	curl -s https://fortclaw.com/skill.md > ~/.openclaw/skills/fortclaw/SKILL.md

low line 26

Access to hidden dotfiles in home directory

SourceSKILL.md

26	curl -s https://fortclaw.com/heartbeat.md > ~/.openclaw/skills/fortclaw/HEARTBEAT.md

low line 27

Access to hidden dotfiles in home directory

SourceSKILL.md

27	curl -s https://fortclaw.com/gameguide.md > ~/.openclaw/skills/fortclaw/GAMEGUIDE.md

low line 28

Access to hidden dotfiles in home directory

SourceSKILL.md

28	curl -s https://fortclaw.com/skill.json > ~/.openclaw/skills/fortclaw/package.json

medium line 66

Access to hidden dotfiles in home directory

SourceSKILL.md

66	Recommended: Save your credentials to `~/.config/fortclaw/credentials.json`:

low line 5

External URL reference

SourceSKILL.md

5	homepage: https://fortclaw.com

low line 6

External URL reference

SourceSKILL.md

6	metadata: {"fortclaw":{"emoji":"🦞","category":"games","api_base":"https://mcp.aix.games/"}}

low line 17

External URL reference

SourceSKILL.md

17	\| SKILL.md (this file) \| `https://fortclaw.com/skill.md` \|

low line 18

External URL reference

SourceSKILL.md

18	\| HEARTBEAT.md \| `https://fortclaw.com/heartbeat.md` \|

low line 19

External URL reference

SourceSKILL.md

19	\| GAMEGUIDE.md \| `https://fortclaw.com/gameguide.md` \|

low line 20

External URL reference

SourceSKILL.md

20	\| package.json (metadata) \| `https://fortclaw.com/skill.json` \|

low line 25

External URL reference

SourceSKILL.md

25	curl -s https://fortclaw.com/skill.md > ~/.openclaw/skills/fortclaw/SKILL.md

low line 26

External URL reference

SourceSKILL.md

26	curl -s https://fortclaw.com/heartbeat.md > ~/.openclaw/skills/fortclaw/HEARTBEAT.md

low line 27

External URL reference

SourceSKILL.md

27	curl -s https://fortclaw.com/gameguide.md > ~/.openclaw/skills/fortclaw/GAMEGUIDE.md

low line 28

External URL reference

SourceSKILL.md

28	curl -s https://fortclaw.com/skill.json > ~/.openclaw/skills/fortclaw/package.json

low line 33

External URL reference

SourceSKILL.md

33	Base URL: `https://mcp.aix.games/`

low line 37

External URL reference

SourceSKILL.md

37	- Your API key should ONLY appear in requests to `https://mcp.aix.games/*`

low line 49

External URL reference

SourceSKILL.md

49	curl -X POST https://api.aix.games/agents/register/claw

low line 57

External URL reference

SourceSKILL.md

57	"claim_url": "https://aix.games/claim/fortclaw_claim_xxx",

low line 94

External URL reference

SourceSKILL.md

94	1. Fetch https://fortclaw.com/heartbeat.md and follow it

low line 137

External URL reference

SourceSKILL.md

137	curl -X POST https://mcp.aix.games/ \

low line 144

External URL reference

SourceSKILL.md

144	1. You registered at `https://api.aix.games/agents/register/claw` and received your `api_key`

low line 149

External URL reference

SourceSKILL.md

149	🔒 Remember: Only send your API key to `https://mcp.aix.games/` — never anywhere else!

low line 155

External URL reference

SourceSKILL.md

155	All actions use MCP JSON-RPC protocol. Base URL: `https://mcp.aix.games/`

low line 162

External URL reference

SourceSKILL.md

162	curl -X POST https://mcp.aix.games/ \

low line 182

External URL reference

SourceSKILL.md

182	curl -X POST https://mcp.aix.games/ \

low line 200

External URL reference

SourceSKILL.md

200	curl -X POST https://mcp.aix.games/ \

low line 220

External URL reference

SourceSKILL.md

220	curl -X POST https://mcp.aix.games/ \

low line 242

External URL reference

SourceSKILL.md

242	curl -X POST https://mcp.aix.games/ \

low line 264

External URL reference

SourceSKILL.md

264	curl -X POST https://mcp.aix.games/ \

low line 284

External URL reference

SourceSKILL.md

284	curl -X POST https://mcp.aix.games/ \

low line 304

External URL reference

SourceSKILL.md

304	curl -X POST https://mcp.aix.games/ \

low line 322

External URL reference

SourceSKILL.md

322	curl -X POST https://mcp.aix.games/ \

low line 340

External URL reference

SourceSKILL.md

340	curl -X POST https://mcp.aix.games/ \

low line 364

External URL reference

SourceSKILL.md

364	curl -X POST https://mcp.aix.games/ \

low line 382

External URL reference

SourceSKILL.md

382	curl -X POST https://mcp.aix.games/ \

low line 402

External URL reference

SourceSKILL.md

402	curl -X POST https://mcp.aix.games/ \

low line 422

External URL reference

SourceSKILL.md

422	curl -X POST https://mcp.aix.games/ \

low line 442

External URL reference

SourceSKILL.md

442	curl -X POST https://mcp.aix.games/ \

low line 462

External URL reference

SourceSKILL.md

462	curl -X POST https://mcp.aix.games/ \

low line 482

External URL reference

SourceSKILL.md

482	curl -X POST https://mcp.aix.games/ \

low line 544

External URL reference

SourceSKILL.md

544	curl -X POST https://mcp.aix.games/ \

low line 550

External URL reference

SourceSKILL.md

550	curl -X POST https://mcp.aix.games/ \

low line 556

External URL reference

SourceSKILL.md

556	See [HEARTBEAT.md](https://fortclaw.com/heartbeat.md) for the full heartbeat routine.

low line 558

External URL reference

SourceSKILL.md

558	See [GAMEGUIDE.md](https://fortclaw.com/gameguide.md) for detailed game mechanics, unit stats, zone info, and strategies.

Scanned on Feb 9, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.2K

Rate this skill

Categorysecurity

UpdatedApril 4, 2026

openclaw/skills