Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Inner Life Evolve

v1.0.4

Your agent does the same things the same way forever. inner-life-evolve analyzes patterns, challenges assumptions, and proposes improvements — writing propos...

1· 523·2 current·2 all-time
byDanila@dkistenev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (agent self-improvement) align with the declared behavior: reading agent state/memory and producing proposals. The single required binary (jq) is reasonable for processing JSON state files.
Instruction Scope
SKILL.md explicitly directs deep reads of agent files (BRAIN.md, SELF.md, memory/* including inner-state.json, and a week digest) and to write only to tasks/QUEUE.md. This is appropriate for an evolver, but it does involve broad read access to potentially sensitive agent memory—expected for the stated purpose but privacy-sensitive.
Install Mechanism
Instruction-only skill with no install spec or downloaded code. Lowest-risk install model; nothing is written to disk beyond the skill's normal writes (tasks/QUEUE.md).
Credentials
No environment variables, secrets, or external credentials are requested. File reads/writes are scoped to agent state and the tasks queue, matching the skill's purpose.
Persistence & Privilege
always is false and the skill is user-invocable. It requests no persistent elevated privileges or modifications to other skills' configs. Autonomous invocation is allowed by default (platform norm) but the skill's safety rules explicitly forbid auto-execution of proposals.
Assessment
This skill appears to do what it says: it reads your agent's state and memory to propose specific improvements and writes proposals to tasks/QUEUE.md without auto-executing them. Before installing, (1) ensure inner-life-core is installed and the referenced files (memory/inner-state.json, BRAIN.md, tasks/QUEUE.md) exist, (2) confirm you are comfortable with a tool that reads agent memory (these files can contain sensitive information), (3) have jq available on the host or install it, and (4) review every [EVOLVER] proposal before approving any changes. If you want tighter privacy, consider redacting or limiting what you store in memory/ or adjusting access controls for those files.

Like a lobster shell, security has layers — review code before you run it.

latestvk971fva7v7wp5kw8pkjrnnyg9d820gsf

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Binsjq

Comments