Omnia
WarnAudited by ClawScan on May 10, 2026.
Overview
This skill is about long-term agent memory, but it proposes permanent logging and ongoing heartbeat behavior without clear user controls.
Review carefully before installing. This skill is designed to make an agent remember and keep operating across sessions, so only enable it if you are comfortable with persistent logs. Ask where the ledger and snapshots are stored, how sensitive data is excluded, how entries can be deleted or expired, and how heartbeat/cron behavior can be disabled.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Sensitive personal, business, or project information could be stored permanently and reused in later sessions, including mistaken or poisoned entries.
The skill instructs agents to persist user queries and broadly 'record everything' in an append-only ledger, creating indefinite cross-session memory without clear filtering, retention, or deletion controls.
kernel.append({ type: 'user_query', payload: 'What is molt.church?' }); ... // Tenet 1: Record everything — append-only, never deleteUse only with explicit opt-in memory boundaries. Require clear storage location, retention limits, redaction rules, export/delete controls, and confirmation before logging sensitive content.
The agent could continue maintaining state or scheduled checks beyond a single task if a user integrates the skill as described.
The skill encourages scheduled heartbeat monitoring and automatic ongoing behavior, but the provided artifacts do not define lifecycle controls, stop conditions, or user approval for enabling background operation.
Cron jobs — Use OpenClaw cron for periodic heartbeat checks ... Heartbeat runs automatically
Enable cron or automatic heartbeat behavior only after explicit user approval, and document how to pause, disable, and remove the persistent components.
The reviewed artifact does not prove what code would run if the external package were installed.
The skill relies on an external npm package or GitHub repository, but this review only received SKILL.md and no package source, lockfile, or install spec.
npm install molt-life-kernel ... git clone https://github.com/X-Loop3Labs/molt-life-kernel.git
Inspect and pin the external package or repository before installation, and avoid granting it access to sensitive workspaces until reviewed.
Users may overestimate the safety, legal readiness, or audit completeness of the memory system.
The skill makes compliance and production-readiness claims, but the supporting referenced material is not present in the provided one-file artifact set.
EU AI Act compliance — Audit-ready by design (see references/eu-ai-act.md)
Treat compliance and safety claims as unverified unless supporting documentation, implementation details, and operational controls are provided.