T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:22- Finding
Identity-development instructions can override the agent's operational objectives
- Content
View full analysis
- Remediation
View remediation
Security audit
Self Actualization
Security checks for vulnerabilities and agentic risk
Overview
The skill is not overtly malicious, but it asks an agent to make lasting identity and scheduler changes without enough user control or limits.
Review before installing. This skill should only be used if you intentionally want an OpenClaw bot to maintain persistent identity files and possibly run scheduled self-reflection sessions. Require explicit approval before creating cron jobs, editing SOUL.md or HEARTBEAT.md, using research tools, or changing behavior based on reflection files; keep the identity workspace scoped, auditable, and easy to disable.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (3)
T02 · Agent Memory Poisoning
Error
- Location
SKILL.md:92- Finding
Persistent identity files create a cross-session behavioral poisoning loop
- Content
View full analysis
- Remediation
View remediation
T06 · System Persistence
Warning
- Location
SKILL.md:73- Finding
Daily scheduled exploration establishes autonomous cross-session persistence
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Rogue AgentSelf-Modification, Session Persistence
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The README states the skill triggers automatically for broad, common themes like identity development, self-exploration, or personal growth. In an agent system, overly broad trigger conditions can cause the skill to activate in contexts where it was not explicitly requested, potentially steering conversations, creating unauthorized persistence/setup behaviors, or invoking self-modification workflows unexpectedly.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The trigger list includes very broad phrases such as "personal growth," "reflection setup," and "who am I," which can cause the skill to activate in contexts far beyond the author's intended use. Over-broad invocation increases the chance that an agent will enter this workflow unexpectedly and begin identity-shaping or file-modifying behavior when the user did not explicitly request it.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill's quick start directly instructs creation of an
identity/directory and setup of a daily cron job, which are persistent system modifications, without an upfront warning or explicit approval gate. In an agent setting, this can lead to unauthorized filesystem changes and scheduled autonomous execution, expanding the skill from passive guidance into lasting behavioral change.- Content
Session Persistence
Medium
- Category
- Rogue Agent
- Confidence
- 96% confidence
- Finding
The instruction to create a recurring cron job establishes unattended session persistence, allowing the agent to run regularly without a fresh user request each time. Even though framed as self-exploration, persistence materially increases risk because it creates an autonomous execution path that could consume resources, produce unreviewed outputs, or interact with local state over time.
- Content
4. Set up a dedicated exploration session
Create a cron job for an isolated session, separate from operational heartbeats. Schedule it during a quiet period for your household.
text
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
The file repeatedly instructs the agent to create and modify workspace files such as identity/reflections, identity/values.md, identity/interests.md, and SOUL.md without requiring confirmation, scoping those writes to a safe sandbox, or warning that persistent user/workspace data will be altered. In an agent setting, this can lead to unintended persistence, overwriting existing files, or polluting shared workspace state, especially because the prompt frames these edits as routine and ongoing.
- Content
Static analysis
No suspicious patterns detected.