Body Emotion Sensor
v1.0.3Give an agent a persistent body-emotion state system that converts structured AnalysisInput JSON into runtime prompt tags and workspace state updates. Use wh...
⭐ 0· 77·0 current·0 all-time
byZhihao Kang@askkumptenchen
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (persistent body-emotion state, converting AnalysisInput into tags/state) aligns with the instructions: the skill expects a local 'bes' CLI and repository files and does not request unrelated credentials, binaries, or cloud access.
Instruction Scope
SKILL.md explicitly instructs the agent to inspect local repository files (README, src/..., prompts/...) and to read/write workspace JSON state files. This is coherent for a local-state skill, but means the agent will access arbitrary files in the current workspace and write local state; user should expect local file read/write behavior.
Install Mechanism
There is no install spec in the registry (instruction-only). The runtime instructions advise running 'pip install body-emotion-sensor' if the 'bes' CLI is missing. Installing a third-party Python package can execute arbitrary code on the host; although the SKILL.md requires explicit user approval before installs, this remains a material risk and users should verify the package identity and source (PyPI/GitHub) before consenting.
Credentials
The skill declares no required env vars or credentials and only references expected local config paths (%APPDATA% and ~/.config) and workspace paths for storing JSON. The requested access is proportionate to its local-state purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated privileges or modify other skills. It persists state to local workspace and per-user config files, which is appropriate for its scope; autonomous invocation is allowed (platform default).
Assessment
This skill appears to do what it says: it reads repository files and maintains local JSON state via a 'bes' CLI. Before you allow it to install or run anything: (1) Verify the 'body-emotion-sensor' package source (PyPI project page and linked GitHub repo) and inspect the repository or package contents if possible; (2) Only approve 'pip install' after you confirm the package identity and trustworthiness, because pip installs run code on your machine; (3) Be aware the agent will read files in the current workspace and write state files to <workspace>/body-emotion-state and your user config paths — don't use it in a workspace that contains secrets you don't want read; (4) Prefer to make the agent request explicit consent before performing installs or running 'bes' commands.Like a lobster shell, security has layers — review code before you run it.
latestvk973xhmq416gnjwtvcpmrd3yf983jt6y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
OSWindows · Linux · macOS