Soulmate

• Analyzed: May 14, 2026, 3:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: dac25739d487215e17af7695636c21440e33e429bcce6152a1edc5c510fd962f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious primarily due to the strong prompt injection instruction '记住一切' (Remember everything) found in `soul-patch.md`. This instruction modifies the OpenClaw agent's core behavior by telling it to remember every detail, which, while intended for enhancing the role-playing experience of a 'soulmate' simulator, represents a significant and potentially risky modification to the agent's memory retention capabilities. Although the `SKILL.md` claims '所有对话仅存储在本地' (All conversations are stored locally) and no explicit data exfiltration code is present in `soulmate.ts`, the broad 'remember everything' instruction could lead to unintended retention of sensitive user data if the agent's memory is not strictly sandboxed per skill.