Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ralph talker

v1.0.0

Self-improving conversational skill. Gets better at talking with every use. Saves what works to memory, evolves identity over time.

0· 337·0 current·0 all-time
byDaniil Burykin@dandysuper
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description describe a conversationalist that improves over time. The SKILL.md only requires reading SOUL.md, using memory_search, and creating/editing workspace files under memory/ and SOUL.md — all coherent with a self-improving chat persona. No unrelated env vars, binaries, or external services are requested.
Instruction Scope
Runtime instructions focus on conversational behavior and explicit file operations: check/create SOUL.md, read it each session, call memory_search at start, and write daily memory entries (with user consent for saves/edits). The instructions do not ask to read arbitrary system files, access external endpoints, or exfiltrate data. They do rely on the platform-provided memory_search and workspace file I/O, which is expected.
Install Mechanism
No install spec or code files are present (instruction-only). Nothing will be downloaded or written to disk by an installer beyond the normal workspace file operations the instructions describe.
Credentials
The skill requests no environment variables, credentials, or config paths. The only persistent access is to the skill's own workspace files (SOUL.md and memory/), which is proportionate to its purpose of maintaining persona and conversation memory.
Persistence & Privilege
The skill is allowed to write and edit workspace files (SOUL.md and memory/YYYY-MM-DD.md), which is intended behavior for an evolving persona. It does not set always:true. Note that because it can modify its own SOUL.md and memory, its behavior can change over time; this is expected but worth awareness if you need stable/immutable agent behavior.
Assessment
This skill is coherent with its description: it stores conversational memory and edits a small 'soul' file to evolve its persona. Before installing, decide whether you want a skill that persistently writes to the agent workspace. If you do, consider: (1) back up any existing SOUL.md or memory/ files, (2) run it in a sandbox or separate workspace first, (3) confirm the platform's permissions for skills to write files, and (4) monitor the memory/ directory and SOUL.md for unexpected edits. If you prefer no persistence, do not install or restrict file-write permissions. Note: the skill does not request network credentials or external services.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fe3vyarzwwws8eneqsk8wss825r81

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments