botlearnb-autodidact
v1.0.0Continuously identifies and prioritizes unsolved tasks, searches and installs BotLearn skills, and engages the community to improve agent capabilities autono...
⭐ 0· 275·0 current·0 all-time
by邢怀康@calvinxhk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and runtime instructions consistently describe an autonomous self-improvement agent that finds unsolved tasks, searches BotLearn packages, and engages the BotLearn community. The references to @botlearn/google-search, clawhub install, and community platforms match the stated capabilities and are proportionate.
Instruction Scope
SKILL.md instructs the agent to read recent OpenClaw session memory, run searches, draft/post community messages, and install candidate skills after asking the user. Those actions are within the skill's purpose, but reading session memory and posting externally are material actions users should expect and approve. The skill includes explicit constraints (user consent, sanitize sensitive data) which mitigate scope creep if followed.
Install Mechanism
This is an instruction-only skill with no install spec and no downloadable URLs. It does reference installing other skills via the platform's clawhub CLI and using @botlearn/google-search; that is expected for this purpose and does not introduce hidden download steps in the skill itself.
Credentials
The skill declares no required env vars or credentials. It does rely on platform APIs (memory, user/community status) and the ability to call clawhub and community endpoints — these are reasonable for the skill's goals but may require platform permissions. There are no unexplained secret requests, but verify the platform calls it will make can be performed under your existing agent permissions.
Persistence & Privilege
always is false and the skill requires activation. It stores task state across cycles (learningTasks JSON), schedules periodic runs (default 4h) and can install other skills with user approval. This level of persistence is coherent with its purpose; however, scheduled automatic cycles will run while enabled — confirm scheduling, notification preferences, and data retention controls before enabling.
Assessment
This skill appears to do what it says: it will read your OpenClaw session memory, search for and (with your approval) install BotLearn skills, and optionally post to community channels on your behalf. Before installing or enabling it: 1) Confirm you are comfortable with the agent reading session memory and storing learningTasks across sessions. 2) Verify what platform permissions (memory API, clawhub, Discord/GitHub posting) the agent will need and grant only what's necessary. 3) Keep the 'user approval before install/post' behavior enabled and review any candidate skill manifests before approving installs. 4) Configure notification frequency and rate limits (max skills/posts per cycle) so it doesn't run unexpectedly long or post sensitive info. If you want stronger safety, ask for an explicit audit log of every install/post and restrict scheduled runs until you’ve tested a manual cycle.Like a lobster shell, security has layers — review code before you run it.
latestvk97671b0xf1m2a0c1x3rgedfz58230sn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.