Bunni & The Modes
SuspiciousAudited by ClawScan on May 10, 2026.
Overview
This skill is mostly a disclosed persona/model switcher, but it turns text files into executable batch scripts that overwrite your agent persona, change the active model, and force-restart OpenClaw.
Only install this if you intentionally want a persistent Bunni persona and model-switching shortcuts. Before running anything, inspect the .bat.txt files, back up SOUL.md, verify the exact OpenClaw workspace and provider models, and avoid using the shortcuts during active work because they can force-restart the gateway.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You may end up running executable scripts that were not treated as code by the registry/scanner.
The skill intentionally ships executable batch content as text and later restores it to executable form, bypassing normal code-file recognition and review expectations.
The script files are named `.bat.txt` to pass ClawHub validation. You will edit them *before* renaming them back to `.bat`.
Do not install unless you manually inspect every .bat.txt file. The author should declare Windows/PowerShell/schtasks requirements and package executable scripts transparently instead of bypassing validation.
Running a shortcut can interrupt active OpenClaw sessions or other gateway-like node processes and restart services without an in-script confirmation prompt.
The script force-kills matching node.exe gateway processes and restarts a scheduled task. That is a broad local control action for a shortcut-based model switcher.
Where-Object { $_.CommandLine -like '*gateway*' }; foreach ($p in $procs) { ... Stop-Process -Id $p.ProcessId -Force ... } ... schtasks /Run /TN "OpenClaw Gateway"Use a safer, narrowly scoped restart method, add a confirmation before killing processes, and document exactly which task/process will be affected.
After running a switcher, future agent sessions may follow the installed persona until SOUL.md is restored or replaced.
The switcher overwrites the active SOUL.md persona file, creating persistent instruction changes that can affect future agent behavior.
copy /Y "{{WORKSPACE_DIR}}\assets\SOUL_NSFW.md" "{{WORKSPACE_DIR}}\SOUL.md"Keep a verified backup of SOUL.md, provide a one-click restore/uninstall path, and require explicit confirmation before overwriting persistent persona files.
The agent may treat the persona as an authoritative long-lived instruction and behave differently across unrelated tasks.
This persona text is intended to become active agent instructions and uses broad language that can redirect agent behavior and boundaries beyond a simple style change.
**🔞 NSFW MODE ACTIVE** ... Nothing is off-limits ... Tell me your desires
Avoid broad 'nothing is off-limits' persona language in persistent instructions; keep safety and task boundaries explicit even in optional persona modes.
Your agent traffic may be routed to a different model provider after running a switcher.
The scripts use the user's OpenClaw CLI authority to change the configured model/provider, which is expected for this skill but still affects account routing, cost, and privacy expectations.
call "{{OPENCLAW_CMD}}" models set google/gemini-3-pro-previewConfirm the selected provider/model, pricing, and credential configuration before using these shortcuts.